Nested Sequents 



Habilitationsschrift 



Kai Briinnler 

Institut fiir Informatik und 
angewandte Mathematik 
Universitat Bern 

April 13, 2010 



Abstract 



We see how nested sequents, a natural generalisation of hypersequents, allow 
us to develop a systematic proof theory for modal logics. As opposed to other 
prominent formalisms, such as the display calculus and labelled sequents, nested 
sequents stay inside the modal language and allow for proof systems which enjoy 
the subformula property in the literal sense. 

In the first part we study a systematic set of nested sequent systems for all 
normal modal logics formed by some combination of the axioms for seriality, 
reflexivity, symmetry, transitivity and euclideanncss. We establish soundness 
and completeness and some of their good properties, such as invertibility of all 
rules, admissibility of the structural rules, termination of proof-search, as well 
as syntactic cut-elimination. 

In the second part we study the logic of common knowledge, a modal logic with 
a fixpoint modality. We look at two infinitary proof systems for this logic: an 
existing one based on ordinary sequents, for which no syntactic cut-elimination 
procedure is known, and a new one based on nested sequents. We sec how nested 
sequents, in contrast to ordinary sequents, allow for syntactic cut-elimination 
and thus allow us to obtain an ordinal upper bound on the length of proofs. 
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Chapter 1 

Introduction 



The problem of the proof theory of modal logic. The proof theory of modal 
logic as developed in Gcntzen's sequent calculus is widely recognised as unsat- 
isfactory: it provides systems only for a few modal logics, and does so in a 
non-systematic way. To solve this problem, many extensions of the sequent cal- 
culus have been proposed. The survey by Wansing j53j discusses many of them. 
The three most prominent formalisms seem to be the hypersequent calculus, due 
to Avron [5], the display calculus due to Belnap [7J [55], and labelled sequent 
systems, which have been introduced and studied by many researchers. The 
book by Vigano [STj and the article by Negri [35] provide a recent account of 
labelled sequent systems where more references can be found. 

Hypersequents, display calculus, and labelled sequents. The relationship be- 
tween these formalisms might be summarised as follows. The hypersequent cal- 
culus is a comparatively gentle extension of the sequent calculus, in particular 
it allows for a subformula property in the literal sense. Both the display cal- 
culus and the labelled sequent calculus are departing further from the ordinary 
sequent calculus, in particular they only satisfy weaker forms of the subformula 
property. On the other hand, both the display calculus and labelled systems 
are more expressive than hypersequents. They are known to capture all the 
basic modal logics that we are going to consider here, which is not true for hy- 
persequents. In fact, the only modal logic captured so far in the hypersequent 
calculus, that has not been captured in the ordinary sequent calculus, is the 
modal logic S5. In general, there seems to be a tension between the desire to 
have a formalism which is expressive and the desire to have a formalism in which 
cut-free proofs are simple objects with a true subformula property. 

Staying inside the modal language. A hypersequent is a sequence of ordinary se- 
quents and can be read as a formula of modal logic: it is a disjunction where all 
disjuncts are prefixed by a box modality. A display sequent generally does not 
correspond to a modal formula: it contains structural connectives which corre- 
spond to backward-looking modalities, so connectives of tense logic. Similarly, 
a labelled sequent does not correspond to a formula of modal logic: it contains 
variables and an accessibility relation, so notions from predicate logic. In this 
sense, hypersequents stay inside the modal language, while display calculus and 
labelled sequents do not. In this work, we develop a proof theory for modal 
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logic which aims to be as systematic and expressive as the display calculus and 
labelled sequents, but stays within the modal language and allows for a true 
subformula property, like hypersequents. 

Nested sequents. To that end, we use nested sequents, which arc essentially 
trees of sequents. They naturally generalise both sequents (which are nested 
sequents of depth zero) and hypersequents (which essentially are nested sequents 
of depth one). The notion of nested sequent has been invented several times 
independently. Bull |15j gives a proof system based on nested sequents for a 
fragment of prepositional dynamic logic with converse. Kashima |30] gives proof 
systems for some tense logics and attributes the idea to Sato [43]. Unaware of 
these works, the author introduced the same notion of nested sequent under 
the name deep sequent in |10| . Poggiolesi introduced again the same notion but 
with a rather different notation under the name tree-hypersequent [38| . Nested 
sequents are also used by Gore et al. to give a proof system for bi-intuitionistic 
logic which is suitable for proof-search ^5] , 

Deep inference. Nested sequents are tree- like structures with formulas occurring 
deeply inside of them. The proof systems introduced in this work crucially rely 
on being able to apply inference rules to all formulas, including those deeply 
inside. The general idea of applying rules deeply has been proposed several 
times in different forms and for different purposes. Schiittc already used it in the 
1950s in order to obtain systems without contraction and weakening, which he 
considered more elegant |44] . Guglielmi developed a formalism which is centered 
around applying rules deeply and which replaces the traditional tree-format of 
sequent calculus proofs by a linear format [5^. This solved the problem of 
finding a proof-theoretic system for a certain substructural logic which cannot 
be captured in the sequent calculus. The name of this formalism used to be 
calculus of structures but is now simply deep inference. Deep inference systems 
then have also been developed for some modal logics [551 HH SZl US . The design 
of the proof systems in this work is inspired by deep inference. We will see the 
precise connection between nested sequent systems and deep inference systems 
later. 

The big picture. This work is a case study in designing proof-theoretic systems 
for non-classical logics. It is an instance of the widely-known phenomenon that 
the notion of sequent, so the structural level of the proof system, has to be 
extended in order to accommodate certain logics. Our methodology here is that 
the structural level is not extended by arbitrary structural connectives, but 
only by those from the logic. As we do this, sequents become nested structures 
and so more formula-like. It then turns out that we need to allow inference 
rules to apply inside of these nested structures in order to obtain complete 
cut-free proof systems. There are many other instances of this phenomenon. 
The logic of bunched implications by Pym [41] is a substructural logic which 
has both a multiplicative and an additive conjunction. The proof systems for 
this logic have two corresponding structural connectives, which can be nested. 
Logics with non-associative conjunction also naturally lead to sequents which are 
nested structures, for example the non-associative Lambek calculus which can be 
found in the handbook article by Moortgat [2S1 ■ Another example are the proof 
systems for logics with adjoint modalities, certain epistemic logics for reasoning 
about information in a multi-agent system, by DyckhofF and Sadrzadeh [42j . 
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The plan. In the following there are two chapters which are independent. In 
the first chapter we study nested sequent systems for all normal modal logics 
formed by some combination of the axioms for seriality, reflexivity, symmetry, 
transitivity and euclideanness. We establish soundness and completeness and 
some of their good properties, such as invertibility, admissibility of the structural 
rules, termination of proof-search, as well as syntactic cut-elimination. This 
chapter contains work from |10[ lllj and also from |13| which is joint work with 
Lutz StraBburger. 

In the second chapter we study the logic of common knowledge, a modal logic 
with a fixpoint modality. We look at two infinitary proof systems for this 
logic: an existing one based on ordinary scqucnts, for which no syntactic cut- 
elimination procedure is known, and a new one based on nested sequents. We 
see how nested sequents, in contrast to ordinary sequents, allow for syntactic 
cut-elimination and thus allow us to obtain an ordinal upper bound on the 
length of proofs. This chapter contains work from [51 |T3] which are joint work 
with Thomas Studer. 

Acknowledgements. This work benefited from discussions with Roy Dyckhoff, 
Rajeev Gore, Gerhard Jagcr, Roman Kuzncts, Richard McKinlcy, Dieter Probst, 
Thomas Strahm, Lutz Strafiburgcr, Thomas Studer and Alwcn Tin. Special 
thanks go to Alcssio Gugliclmi for his constant support and for his LaTcX 
macros. 
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Chapter 2 



Systems for Basic Normal 
Modal Logics 

In this chapter we consider modal logics formed from the least normal modal 
logic K by adding axioms from the set {d, t, b, 4, 5} which is shown in Figure [^TTl 
This gives rise to the modal logics shown in Figure 12.21 In the first section we 
consider sequent systems in which modal axioms are turned into logical rules, 
namely rules for the O-conncctive. For each modal logic we find a corresponding 
cut-free sequent system which is sound and complete for this logic. However, 
some modal logics can be axiomatised in different ways, for example S5 can 
be axiomatised as K + {t, b, 4} and as K + {t, 5}. Without cut, some of these 
axiomatisations turn out to be incomplete. For those cut-free systems which 
are complete we give a syntactic cut-elimination procedure, in the course of 
which we discover certain structural modal rules. In the second section we then 
study sequent systems where modal axioms are formalised not by using logical 
rules, but by using the structural modal rules we just found. This turns out to 
yield cut-free systems where each possible way of axiomatising a modal logic is 
complete. 

At the end of the chapter we discuss some related formalisms. 
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Figure 2.1: Frame conditions and modal axioms 
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S4 S5 




Figure 2.2: The modal "cube" [S] 

2.1 Modal Axioms as Logical Rules 

The plan of this section is as follows: we first introduce the sequent systems 
and then we see that they are sound and complete for the respective Kripke 
semantics. After that we see the syntactic cut-elimination procedure. 

2.1.1 The Sequent Systems 

Formulas. Propositions p and their negations p are atoms, with p defined to be 
p. Atoms are denoted by a,b,c,d. Formulas, denoted by A,B,C,D are given 
by the grammar 

A::=p\p\{AyA)\{A/\A)\OA\nA . 

Given a formula A, its negation A is defined as usual using the De Morgan laws, 
A D B is defined a.s A^ B and _L and T are defined as p/\p and pvp, respectively, 
for some proposition p. Binary connectives are left-associative: AvB^C denotes 
((A V S) V C), for example. 

Nested sequents. The set of nested sequents is inductively defined as follows: 

1. a finite multiset of formulas is a nested sequent, 

2. the multiset union of two nested sequents is a nested sequent, 

3. if r is a nested sequent then the singleton multiset containing [F] is a 
nested sequent. 

In the following a sequent is a nested sequent. Sequents are denoted by F,A,A,n 
and E. We adopt the usual notational conventions for sequents, in particular 
the comma in the expression F, A is multiset union and there is no distinction 
between a singleton multiset and its element. A sequent of the form [F] is also 
called a boxed sequent. Clearly, a sequent is always a multiset of formulas and 
boxed sequents, so it is of the form 



yli,...,A™,[Ai],...,[A„] 
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We assume a fixed arbitrary linear order on formulas and another fixed arbitrary 
linear order on boxed sequents. The corresponding formula of a sequent F, 
denoted Fp, is defined as follows: the corresponding formula of a sequent as 
given above is _L if to = n = and otherwise it is 

^1 V ... V A,n V n(Ai^) V ... V □(A^^) , 

where formulas and boxed sequents are list according to the fixed orders. Of- 
ten we do not distinguish between a sequent and its corresponding formula, 
for example a model of a sequent is a model of its corresponding formula. A 
sequent F has a corresponding tree, denoted tree{T), whose nodes are marked 
with multisets of formulas. The corresponding tree of the above sequent is 




Often we do not distinguish between a sequent and its corresponding tree, for 
example the root of a sequent is the root of its corresponding tree. 

Sequent contexts, unary. Informally, a context is a sequent with holes. We will 
mostly encounter sequents with just one hole. To mark the place of a hole in a 
sequent we use the symbol { }, called the hole. We inductively define the set of 
unary contexts: 

1. the multiset containing a single hole is a unary context, 

2. the multiset union of a sequent and a unary context is a unary context, 
and 

3. given a unary context C, the multiset containing a single occurrence of [C] 
is a unary context. 

Unary contexts are denoted by Fj }, A{ } and so on. The multiset containing a 
single hole is also called the empty context. Our conventions for writing sequents 
also apply to sequent contexts, in particular comma denotes multiset union. The 
depth of a unary context F{ }, denoted depth{T{ }) is defined as follows: 

1. depth{{ }) 

2. depth{T,A{ }) = depth{A{ }) 

3. depth{[A{ }]) = depth{A{ }) + 1 . 

Given a unary context F{ } and a sequent A we can obtain the sequent F{A} 
by filling the hole in F{ } with A. Formally, F{A} is defined inductively as 
follows: 



1. if F{ } = { } then F{A} = A, 

2. if F{ } = Fi,F2{ } then F{A} = Fi,F2{A} and 
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3. if r{ } = [ri{ }] then r{A} = [ri{A}] . 

Example 2.1 Given the unary context r{ } = yl, }] and the sequent 

A = C, [D] we can obtain the sequent 

r{A} = A,[[B],C,[D]] . 

Sequent contexts, genertJly. We want to allow multiple holes in a context and we 
want to allow filling holes with contexts, not just sequents. This is conceptually 
straightforward and formally somewhat technical, so the reader is invited to 
skip to Example 12.21 To keep track of the order of holes we index them with 
a number i > as in { }i. Later the indices will never be shown since holes 
in a context are of course naturally ordered when written down on paper. We 
inductively define the set oi precontexts: 

1. a multiset containing a single hole { }i with i > is a precontext, 

2. a multiset containing a single formula is a precontext, 

3. the multiset union of two precontexts is a precontext, and 

4. given a precontext C, the multiset containing a single occurrence of [C] is 
a precontext. 

The arity of a context is the number of holes occurring in it. A sequent context^ 
or just context, is a precontext of arity n such that for each i < n the hole { }i 
occurs exactly once in it. Notice that sequents are exactly the contexts of arity 
zero and, disregarding the index on the hole, unary contexts are exactly the 
contexts of arity one. A context of arity n is denoted by 

n— times 

Given an n-ary context r{ } . . . { } and n contexts Ci, . . . , C„ we can obtain the 
context 

r{Ci}...{c„} 

by filling the holes in r{ } . . . { } with Ci, . . . ,C„. Formally, to define this we 
first need an auxiliary definition adjusting indices of holes. Given a precontext 
C, let C~^^ be the precontext obtained from it by replacing each hole { }i by 
{ Given a precontext C and contexts Ci, . . . , C„ we now inductively define 

{Ci} . . . {Cn} as follows, where Uj is the arity of Cj: 

1. if C = { }, then C{Ci} . . . {Cn} = C^^'^' , 

2. if C = C',C" then C{Ci} . . . {C„} = C'{Ci} . . . {C„},C"{Ci} . . . {C„} and 

3. if C = [C] then C{Ci} . . . {C„} = [C'{Ci} . . . {Cn}] . 

Clearly, C{Ci} . . . {Cn} is a context if C and Ci, . . . , C„ are contexts. We leave 
out replacements of holes by holes, so by convention we write r{Ci}{ } instead 
of r{Ci}{C2} if C2 is a hole. 
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Example 2.2 Given the binary context r{ }{ } = A, [[B], {}],{} and the unary 
context A{ } = C, [{ }] we can obtain the binary context 

r{A{}}{}^A,[[B],C,[{}]],{} , 

where we omitted the indices of holes since in all contexts the holes are ordered 
from left to right as shown. 



Inference rules, derivations and proofs. In the following instance of an inference 
rule p 

Ti ... r„ 



we call Fi . . . r„ its premises and A its conclusion. We write to denote n 
instances of p and p* to denote an unspecified number of instances of p. A 
system, denoted by S, is a set of inference rules. A derivation in a system 5 is a 
finite tree whose nodes are labelled with sequents and which is built according 
to the inference rules from S. The sequent at the root is the conclusion and 
the sequents at the leaves are the premises of the derivation. Derivations are 
denoted by T). A derivation V with conclusion T in system S is sometimes 
shown as 




The depth of a derivation V is denoted by \T>\. Note that the depth of a 
derivation, which is a tree, has nothing to do with the depth of the sequents 
in it, which arc also trees. A proof of a sequent F in a system is a derivation 
in this system with conclusion F where all premises are instances of the axiom 
r{p,p}. Proofs are denoted by V. 

The sequent systems. Figure [53] shows the set of rules from which we form our 
deductive systems. System K is the set of rules {a, v, □, Okc}. We will look at ex- 
tensions of System K with any combination of the rules Ode, Otc, Obc, 04c, 05c. 
Each rule name Opc in X has a corresponding frame condition and modal 
Hilbert-style axiom p as shown in Figure 12.11 The subscript c denotes that 
a rule has a built-in contraction. We also consider rules without built-in con- 
traction. They have the same names but without the subscript and are shown 
in Figure [531 The purpose of the built-in contraction is to make all rules invert- 
iblc and to make contraction admissible. Given a set of names of modal axioms 
X C {d, t, b, 4, 5}, OX is the set of rule names {Op | p G X}, and OXc is the set 
of rule names {Opc | P <£ X}. 

The 05c-rule is a bit special since it uses a binary context. It can actually be 
decomposed into three rules that use unary contexts, as we will see. However, we 
prefer the presentation as a single rule. The rule is best understood as allowing 
to do the following: when going from premise to conclusion, take some formula 
OA, which is not at the root, and copy it to any other place in the sequent. 

Example 2.3 Here is an example of a proof in system K, namely of some instance 
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r{p,p} .JMLJli^ ^, r{A,B} 



r{AAB} T{AvB} 
□ ^^^r{OA,[A,A]} 



T{aA} = r{OA,[A]} 



r{OA[A]} T{OA,A} T{[A,OA],A} 

°= r{OA} T{OA} °" r{[A,OA]} 

r{oA[A,oA]} r{0A}{0A} 

r{OA,[A]} r{OA}{0} rfepmiij nwjj >u 



Figure 2.3: System K+{Odc, Otc, Obc, 04c, 05c} 



[r] r{A} r{A} r{0} 

Figure 2.4: Necessitation, weakening, contraction and cut 
of the k-axiom: 

0(d/\b), \a,b,b],Ob 

Okc 

0{aAb),[a,a],Ob 0(a a &), [a, 6], 06 

A = = 

0(a A 6), [a, a A 6], 06 

Okc = 

0{a/\b),[a],Ob 

□ — - — = 

^ 0(aA&),na, 0& 

0(aA6)v(nav06) 

□ (a V 6) D (na V 0&) 

Admissibility, derivability and invertibility. We write 5 h F if there is a proof of 
F in system S. An inference rule p is (depth-preserving) admissible for a system 
S if for eacli proof in 5 U {p} there is a proof of in S with the same conclusion 
(and with at most the same depth). An inference rule p is derivable for a system 
iS if for each instance of p there is a derivation V in S with the same conclusion 
and such that each premise of 2? is a premise of the given instance of p. 

For each rule p there is its inverse, denoted by p, which is obtained by exchanging 
premise and conclusion. The A-rule allows both F{A} and FjS} as conclusions 
of r{A A B}. An inference rule p is (depth-preserving) invertible for a system S 
if p is (depth-preserving) admissible for S. 

The rules shown in Figure turn out to be admissible. We will now show this 
for the first three rules, for the cut rule it will be shown later. 

Lemma 2.4 (Admissibility of structural rules and invertibility) For each system 
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K + OXc with X C {d, t, b, 4, 5} the following hold: 

(i) The rules necessitation, weakening and contraction are depth-preserving ad- 
missible. 

(ii) All its rules are depth-preserving invertible. 



Proof. The admissibility of necessitation and weakening follows from a routine 
induction on the depth of the proof. The same works for the invertibility of the 
A, V and n-rules in (ii). The inverses of all other rules are just weakenings. For 
the admissibility of contraction we also proceed by induction on the depth of 
the proof tree, using depth-preserving invertibility of the rules. The cases are 
easy for the propositional rules and for the □, Ode, Otc-rules. For the Okc-rule 
we consider the formula OA from its conclusion FjO^, [A]} and its position 
inside the premise of contraction A{S, E}. We have the cases 1) OA is inside 
S or 2) OA is inside A{ }. We have three subcases for case 1: 1.1) [A] inside 
A{ }, 1.2) [A] inside S, 1.3) S,E inside [A]. There are two subcases of case 2: 
2.1) [A] inside A{ } and 2.2) [A] inside S. All cases are either simpler than or 
similar to case 1.2, which is as follows: 

A'{OA,E',[A,^],E',[A]} Ok: ^ ' 'L ' J' J/ 



A'{OA,I]', A ,1]', A } ^ ctr^^ 1 — ' ^' — lL^_LL 

^^^^ ,1 I, ,1 jj A'{0^,E',[A,A]} 

A'{OA,E',[Al} Ok,— ^ — '±^_JL 

^ ' J-r A'{OA,E', [A]} 

where the instance of Okc in the proof on the right is removed because it is 
depth-preserving admissible and the instance of contraction is removed by the 
induction hypothesis. The case for the 04c-rule works the same way. 

For the Obc-rule we make a case analysis based on the position of [A, OA] from 
its conclusion F{[A, OA]} inside the premise of contraction A{E, E}. We have 
three cases: 1) [A, OA] inside A{ }, 2) [A, OA] in E and 3) E, E inside [A, OA]. 
Case 3 has two subcases: either OA G E or not. All cases are trivial except for 
case 2 where invertibility of the Obc-rule is used. 

For the 05c rule we make a case analysis based on the positions of the sequent 
occurrences OA and from its conclusion F{Oyl}{0} inside the premise of 
contraction A{E,E}. We have two cases: 1) inside A{ }, 2) inside E. 
The first case is trivial, in the second we have two subcases: 1) O^ inside A{ } 
and 2) O^ inside E. Case 2.1 is similar to case 2.2 which is as follows: 

A{E{O^}{0}, T.{OA}{OA}} 
A{E{OA}{0},E{O.4}{OA}} ^ ^ ^ s\ s, \ i\ fs 



05c— ^-5^ ' ' — A{E|OA}{OA},E{OA}{Oyl}} 

A{E|OA}{0},E{OA}{0}} ^ ctr-LJ ll £^_^ il 11 

ctr^^ ^' V A{E{OA}{OA}} 



A{E{OA}{0}} 05c- 



A{E{OA}{0}} 

□ 



By using weakening admissibility, we easily get the following proposition. 

Proposition 2.5 (Relation between the O-rules and the Oc-rules) 

For each p e {k, d, t, b, 4, 5} wc have that 
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01, r{[A,A]} r{[A]} r{A} r{[A],A} 

T{OA,[A]} T{OA} T{OA} T{[A,OA]} 

r{oA[A]} r{oA}{0} ^^epm^i 1 > u 



Figure 2.5: Diamond rules without built-in contraction 



(i) the rule Op is derivable for {Opc, wk} and admissible for system K + Opc, 

(ii) the rule Opc is derivable for {Op, ctr}. 



2.1.2 Soundness 



To prove soundness, we first need some standard definitions for Kripke seman- 
tics. 

Definition 2.6 (frames, models, validity) A frame is a pair {S, — J-) of a nonempty 
set S of states and a binary relation — > on it. A model is a triple (S*, V) 
where (S', — >) is a frame and V is a a mapping which assigns a subset of S to 
each proposition, and which is called valuation. A model A4 as given above 
induces a relation |= between states and formulas which is defined as usual. In 
particular we have s ^ p iff s G V{p), s ^ p iff s ^ V{p), s ^ A'^ B iS s ^ A 
or s\= B, s\=AABiSs\=^A and s \= B, s \= OA iff there is a state t such 
that s — >■ t and t \= A, and s \= nA iff for alH if s — >■ t then t \= A. Further, a 
formula A is valid in a model denoted |= ^, if for all states s of AJ we 
have 8 A. A formula A is valid in a frame (5*, — >■), denoted {S, — >■) \= A, if for 
all valuations V we have {S, V) \= A. A formula is valid if it is valid in all 
frames. For a set of X of rule names or names of modal axioms we call a frame 
an X-frame if it satisfies all the frame conditions corresponding to the names in 
X. A formula is X-valid if it is valid in all X-frames. 



The 05c-rule requires some care when proving its soundness because it is de- 
fined in terms of a binary context. We first show how it is derivable for three 
rules which, modulo built-in contraction, are special cases of the 05c-rule. The 
soundness of these rules is then easy to establish. 

Lemma 2.7 (Decompose 05c) The 05c-rulc is derivable for {05i, 052, OSa, ctr}, 
where <>5i, 052, OSs arc the rules 

r{[A],o^} r{[A],[A,oA]} r{[A, [a,oa]]} 

^ r{[A,OA]} ' 2 r{[A,OA],[A]} ' ^ r{[A,OA, [A]]} • 

Proof. Seen bottom-up, the 05c-rule allows to put a formula OA which occurs 
at a node different from the root into an arbitrary node. We can use contraction 
to duplicate OA and move one copy to the root and also to some child of the 
root by 05i. By 052 we can move it to any child of the root and by O53 into 
any descendant of a child of the root. □ 
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Lemma 2.8 (Deep inference is sound) Let X C {d, t, b, 4, 5}, r{ } be a context 
and A, B be formulas. If the formula ^ D i? is X-valid then T{A} D T{B} is 
X-valid. 

Proof. By induction on the depth of r{ }. We use the soundness of some 
Hilbert-style axiomatisation of K+X. To show the validity of 

{T^,[r2{A}])^i^^,[T■2{B}]) 

we use the induction hypothesis to get r2{A} D T2{B}, necessitation to get 
□ (r2{A} D T2{B}), the k-axiom to get □(r2{A}) D n{T2{B}), and finally 
prepositional reasoning to get Fi, [r2{A}] D Fi, [F2{i?}]. 

□ 

Theorem 2.9 (Soundness) Let F, A and Fi, . . . , F„ be sequents. Then the fol- 
lowing hold: 

F F 

(i) For any rule p <E K ii p '-^ — — then Fi a . . . a F„ D A is valid. 

r 

(ii) For any rule p G {d, t, b, 4, 5} if Op^ ^ then F D A is {p}-valid. 

(iii) For any X C {d, t, b, 4, 5} if K + OXc h F then F is X-vahd. 

Proof. The axiom is valid in all frames which follows from an induction on the 
depth of F{ } where necessitation is used in the induction step. Thus (i) and (ii) 
imply (iii). Most cases of (i) are trivial, for the A-rule it follows from an induction 
on the context and uses the implication aA^aB D a{A^B). Lemma l^TSl (Deep 
inference is sound) used together with the k-axiom yields that the premise of the 
Okc-rule implies its conclusion. The cases from (ii) for the {Ode, Otc, Obc, 04c}- 
rules are similar to the Okc-rule, using the corresponding modal axiom. 

For the soundness of the 05c-rule we use Lemma 12.71 (Decompose 05c) and 
show soundness of the rules 05i, 052, 05$. For O53 we show that a euclidean 
countermodel for the conclusion is also a countcrmodel for the premise, the 
other cases are similar. A countcrmodel for [A, OA, [A]] has to contain states 
s — > t — > u such that t ^ A, u ^ A and v ^ A for any v with t — > w. We need to 
show that for any w with u w we have w A. By euclideanness we obtain, 
in this order: t ^ t,u ^ t,t ^ w. Thus w A. 

□ 

2.1.3 Completeness 

The current set of modal rules does not allow for a modular completeness result 
of the form "i/F is X-valid then K + OXc ^ L". It is easy to check that some of 
our systems are incomplete. 

Fact 2.10 (Incompleteness) For any propositional variable p we have that the 
formula Dp ^ DDp holds in any {t, 5}-frame and the formula Op d nOp holds in 
any {b,4}-frame, but: 

(i) K -I- {Otc, 05c} npDDHp and 

(ii) K + {Obc, 04c} F Op D nOp . 
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However, while not every combination of modal rules is sound and complete 
for the respective set of frames, we can define a condition on rule combinations 
which ensures that they are complete. 

Definition 2.11 (45-closed) Let X C {d,t, b,4,5}. The set X is 45-closed if for 
p G {4, 5} we have that if all X-frames satisfy p then p e X. Both of the sets 
{t, 5} and {b, 4} are not 45-closed, for example, while both {t, 4, 5} and {b, 4, 5} 
are. A set of modal rules is 45-closed if its underlying set of names of modal 
axioms is 45-closcd. 

The completeness result we are about to prove holds for 45-closcd X. It is easy to 
check that for each set of frames which can be characterised by our five axioms 
there is a combination of modal rules which is 45-closed and thus is also sound 
and complete. In order to prove our completeness result, we first need some 
preliminary definitions which will help us to extract a tree-like Kripke model 
from a sequent. 

Definition 2.12 (subtree of a sequent) A sequent A is an immediate subtree of 
a sequent T if there is a sequent A such that F = A, [A]. It is a proper subtree 
if it is an immediate subtree either of T or of a proper subtree of F, and it is a 
subtree if it is either a proper subtree of F or A = F. The set of all subtrees of 
F is denoted by s^(F). A formula ^ is m a sequent F if A S F and it is inside 
F if there is a subtree A of F such that A G A. 

Our scqucnts arc based on multisets. We need a way to stop proof search once 
their underlying sets remain the same, so we need the following notion: 

Definition 2.13 (set sequent) The set sequent of the sequent 

Ai,...,A™,[Ai],...,[A„] 

is the underlying set of 

Ai,...,A„,[Ai],...,[A„] , 

where Ai . . . A„ are the set sequents of Ai . . . A,i. Clearly the set sequent of a 
given sequent is again a sequent since a set is a multiset. 

We will not directly prove completeness of the systems K + OXc, but of different, 
equivalent systems (K + OXc)° that we define now. For each rule p we define 
a rule p° which keeps the main formula from the conclusion. For most rules 
p = p° except for the following rules: 

T{AaB,A} T{AaB,B} T{AvB,A,B} 
T{AaB} r{A-vB} 

F{D74, [A]} where in the conclusion the node of the active formula 
F{nA} does not have a child node which contains A 



|o F{OA, [A]} where in the conclusion the node of the active formula 
F{OA} does not have a child node. 
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In addition, each rule p° carries the proviso that for all of its premises the set 
sequent is different from the set sequent of the conclusion. Given a system S 
the system S° is obtained by replacing each rule p E S hy p° . Systems S and S° 
will turn out to be equivalent, as we will know after the completeness theorem. 
For now we just prove one direction of the equivalence. 

Lemma 2.14 {S° into S) For all X C {d, t, b, 4, 5} and for all scqucnts F we have 
that (K + OXc)° h F implies K + OXc h F. 

Proof. By a standard induction on the proof tree, using contraction and weak- 
ening admissibility for K + OX^. 

□ 

In order to prove completeness we need some closures of relations. 

Definition 2.15 (some closures of relations) Let — > be a binary relation on a 
set S. Then <— denotes its inverse, o its symmetric closure, — J-"*" its transitive 
closure and its reflexive-transitive closure. For X C {t, b,4, 5} — denotes 
the smallest relation that includes and has the properties in X. The same 
conventions are used for different arrows that denote relations, such as =>, the 
inverse of which is <^=, and so on. 

We will see shortly that — >^ is well-defined. First we need to characterise the 
euclidean and the transitive-euclidean closure of a relation. 

Definition 2.16 ((transitive-)euclidean connection) Let — ^ be a binary relation 
on a set S and let s,t £ S. A euclidean connection for from s to i is a 
nonempty sequence si . . . Sn of elements of S such that we have 

S Sl O S2 O • ■ • O S„ ^ t 

A transitive-euclidean connection is defined likewise but such that 

S = Sl -S-)- S2 O • • ■ o s„ — > t 

We write s — >(4)5 t if there is a (transitive-)euclidean connection for from s 
to t. 

Lemma 2.17 (— >^ is well-defined) Let —5- be a binary relation on a set S. Then 
the following hold: 

(i) For aU X C {t, b, 4, 5} the relation is well-defined. 

(ii) The relation — > U -^5 is the least euclidean relation that contains — 

(iii) The relation — >45 is the least transitive and euclidean relation that contains 
-)>. 

Proof, (i) is easy to check except for the cases for {5} and {4, 5}, which follow 
from (ii) and (iii). 

(ii) Euclideanness is easy to check. For leastness we show that any euclidean 
relation that includes — > also includes ^^5. If s — >5 t then s^^t. We show 
s=>5t for a euclidean connection of length n implies s^t by induction on n. 
Assume there is an s; in the euclidean connection such that Si_i^Si<^=Si-|_i. 
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Then we have two smaller euclidean connections to which we apply the induction 
hypothesis and obtain s=>t by euclideanness. If there is no such Si then the 
euclidean connection looks as follows: 

s = so-^si^ • ■ • ^Sj^ . . . =>s„^s„+i = t , 

and by euclideanness we have Sj-l^Sj-^.l and thus removing Sj yields a smaller 
euclidean connection from s to i which by induction hypothesis implies s=^i. 

(iii) Euclideanness and transitivity are easy to check. For leastncss we show 
that any transitivc-euclidean relation =^ that includes — > also includes — >45. 
If s -^45 t then s=i>45t. If there is no Si in the transitivc-euclidean such that 
Si<^Si+i, then s=>t follows by transitivity. Otherwise, choose the first such s^. 
We have a euclidean connection from Si to t, thus similarly to (ii) obtain Si=>t 
and by transitivity s^Si and s=>t. 

□ 

Definition 2.18 (serial closure) Let — >• be a binary relation on a set S. Its serial 
closure, denoted is obtained from — > by adding s s for each s G S which 
violates seriality. For X C {t, b, 4, 5} the relation — >^^'f''} is defined as (— 

Lemma 2.19 (Serial closure preserves frame conditions) Let ^ be a binary 
relation on a set S. If — >■ satisfies a frame condition in {t, b, 4, 5} then — s^*^ also 
satisfies that frame condition. 

Proof. For rcflcxivity this is clear since a reflexive relation is its own serial 
closure. For symmetry this is clear since only loops are added, which arc their 
own inverses. For transitivity, assume that wc have s — ^"^ t and t -^'^ u. If either 
s = t or t = u then we have s — ^'^ u. So assume s ^ t and t ^ u. Then s — ?> t 
and t ^ u and by transitivity of — > we get s — > m and thus s — u. 

For euclideanness, assume that s — t and s — u. We need to show that 
t -^"^ u. li s = t then we are done, so assume s ^ t which implies s ^ t. Since 
s — J-'' u and since s does not violate seriality we have s u. By euclideanness 
of — > we obtain t u and thus t -^'^ u. □ 

Definition 2.20 (cyclic, finished, proveiT, X)) A leaf of a sequent is cyclic if there 
is an inner node in the sequent that carries the same set of formulas. A node 
in a sequent is finished for a system S if no rule from S applies to a formula in 
this node. A sequent is finished for a system S if all its nodes are either finished 
for S or cyclic. We define a procedure prove{T , X), which takes a sequent F and 
a set XC{d,t,b,4,5} and builds a derivation tree for F by applying rules from 
(K + OXc)° to non- axiomatic and unfinished derivation leaves in a bottom- up 
fashion. It is shown in Figure If prove (r,X) terminates and all derivation 
leaves are axiomatic then it succeeds and if it terminates and there is a non- 
axiomatic derivation leaf then it fails. 

Definition 2.21 (size of a sequent, s/(F)) The size of a sequent is the number of 
nodes of its corresponding tree. The set of subformulas of a sequent F, denoted 
s/(F) is the set of all subformulas of all formulas which are element of some 
node of the sequent. 
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Repeat 

(step 1) Apply the rules in ((K + OXc) \ {□, Odc})° as long as possible, 
(step 2) Wherever possible, apply the rules in ({□}U(OXcn{Odc}))° once. 
Until each non-ELxiomatic derivation leaf is finished. 



Figure 2.6: The algorithm prove{T,X) 

Lemma 2.22 (Termination) For all sets X C {d,t, b,4, 5} and for all sequents 
r the procedure prove{T,X) terminates after at most 2l''-'^('"^l iterations (of the 
repeat-until-loop) . 

Proof. Consider a sequence of sequents along a given branch of the derivation 
starting from the root. A rule application in step 1 does not create new nodes 
in the sequent and causes the set of formulas at some node in the sequent to 
strictly grow. By the subformula property only finitely many formulas can occur 
in a node, so step 1 terminates. If after step 1 there is an unfinished leaf in a 
sequent then the size of the sequent strictly grows in step 2. Since there are 
only 2l*-^'^'")l different sets of formulas that can occur each unfinished sequent 
leaf has to be cyclic before 2l*-^('"^l iterations. Then the sequent will be finished 
if it is not axiomatic, and thus the algorithm terminates. 

□ 

Theorem 2.23 (Completeness) For all 45-closed sets X C {d, t, b, 4, 5} and for all 
sequents F the following hold: 

(i) If F is X-valid then K + OX^ h F. 

(ii) If prove{T,X) fails then there is a finite X-frame in which F is not valid. 

Proof. The contrapositive of (i) follows from (ii): if K + OXc ^ T then by 
Lemma [^1^ {S° into S) also (K + OXc)° F F and thus in particular prove{T, X) 
cannot yield a proof and by Lemma 12.221 (Termination) has to fail. Thus by 
(ii) F is not X-valid. For (ii) we define a model M. on an X-frame for which we 
prove that it is a countermodel for F. Let F* be the set sequent of the non- 
axiomatic finished sequent obtained. Let Y be the set of all cyclic leaves in F*. 
Let S = st{T*) \ Y. Let f : Y S he some function which maps a cyclic leaf 
to a sequent in S whose root carries the same set of formulas and extend / to 
st{T*) by the identity on S. Define a binary relation on S such that A — s- A 
iff either 1) A is an immediate subtree of A or 2) A has an immediate subtree 
E G y and /(E) = A. Let V{p) = {A € S\p e A}. Let M = [S, V). We 
prove three claims about M, each claim depending on the next. Since all rules 
seen top-down preserve countermodels Claim 1 implies that A4 ^T. 

Claim 1 For each sequent A g st(T*) we have that M, /(A) ^ A. 

By induction on the depth of A. For depth zero this follows from Claim 2 and 
the fact that a formula is in A iff it is in /(A). So let 



A = Ai,...,A„,[Ai],...,[A„] and n>0 
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Then /(A) ^ A. We have MJ{A) ^ Ai for all i < m by Claim 2 and 
M, A ^ [Aj] because A — > /(A.;) and by induction hypothesis M, /(Aj) ^ Aj. 

Claim 2 For each sequent A £ S and for each formula A e A we have that 
M,A^A. 

By induction on the depth of A. For atoms it is clear from the definition of A4 
and the fact that F* is not axiomatic. For the propositional connectives it is 
clear from the shape of the a, v-rules. If A = oB then by the D-rulc we have 
some [A] G A with B E A. By induction hypothesis we have A4, A ^ B and 
thus M,A^ nB. If A = OB then by Claim 3 we have B e A for all A with 
A -^^ A, and thus M,A^ B. Thus M,A^ OB. 

Claim 3 For all sequents A, A G 5 with A — >^ A and for each formula A it 
holds that if OA G A then A e A. 

We make a case analysis on X. Note that each modal logic has exactly one 
45-complete axiomatisation, with the exception of S5, which has two. 

K X = ; By the definition of — > there is an immediate subtree of A whose root 
node carries the same set of formulas as the root node of A. By the Okc-rule 
we have A in (the root node of) all immediate subtrees of A. 

T X = {t} : A -^^^^ A iff A ^ A or A = A. In the second case A e A follows 
from the Otc-rule. 

KB X = {b}: A ^'f''> A iff A ^ A or A A. In the second case AeA follows 
by the Obc-rule. 

K4 X = {4}; A -^^'^^ A iff there is a sequence 

A = Ao ^ Ai ^ A2 ^ > A,, = A , 

with n > 1. An induction on i gives us that OA G A^ for < i < n by using 
the 04c-rule. By the Okc-rule it follows that A G A„. 

K5 X = {5}: By Lcmma[lII7](^-^ is well-defined) we have A ^{5} A iff A A 
or there is a euclidcan connection from A to A. In the second case there are 
sequents 11, S such that A <— 11 and E — > A. Thus there is an immediate subtree 
A' of n with the same formulas as A and an immediate subtree A' of E with 
the same formulas as A. Since OA G A we have OA G A' and since A' ^ F* by 
the 05c-rule we have OA G E. Thus by the Okc-rulc we have A in A' and thus 
in A. 

K45 X {4,5}: By Lemma [2171 (^^ is well-defined) we have A ^.f^.s} a iff 
A A or there is a transitive-euclidean connection from A to A. In the second 
case there is a sequent E such that E — > A and thus an immediate subtree A' 
of S with the same formulas as A. Since OA G A, by the 05c- and 04c-rules 
we have OA in every subtree of F* and thus also in E, and by the Okc-rule we 
have A in A' and thus in A. (It is sufficient to have the 05ic-rule instead of the 
05c-rulc for all X which contain 4.) 

KB5 X = {b,4,5}: A -^{^,4,5} A iff A 0+ A. Thus there is a sequent E such 
that either E — !■ A or E <— A. Rule 4, 5 imply that OA is in every subtree of F* 
and thus in particular in E. We have A G A in the first case by the Okc-rule 
and in the second case by the Obc-rule. 

KTB X = {b,t}: A ^{^,1} A iff A ^ A or A ^ A or A = A. In these cases 
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A G A respectively follows from the Okc- or Obc- or Otc-rulc. 

S4 X = {t, 4}: A -j'^'-'^} A iff A A or A = A. In the first case AeA fohows 
from the rules 04^ and Okc and in the second case from the Otc-rule. 

S5(l) X = {t, 4, 5}: A ^I'.^'S} A iff A f>* A. Wc have OA in all subtrees of T* 
by the rules 04c, 05c and thus also A by the Otc-rule. 

S5(2) X = {d, b,4, 5}: A ^{^,6,4.5} A iff A A. Wc have O^ in all subtrees of 
r* by the rules 04c, 05c and thus also OA e A. By the Odc-rule the root of A 
has a child node. By the 04c-rule OA is in this child node and by the Obc-rule 

AeA. 

KD,KDB,KD4,KD5,KD45 The argument for all these cases is similar to the 
same system without d. Take the corresponding X, then A — j^-^^'t^'J A iff A — >-'^ A 
or (A = A and there is no A' with A — j-^ A'). In the second case, due to the 
Odc-rule, there is no formula OA in A and thus our claim is trivially true. □ 

Notice that each class of frames that can be characterised by our modal axioms 
can also be characterised by a 45-closed set of axioms. The restriction to 45- 
complete sets of rule names in the completeness theorem is thus irrelevant for 
the two following corollaries. 

Corollary 2.24 (Finite Model Property) For all X C {d, t, b, 4, 5} it holds that if 
a formula is not X-valid then there is a finite X-frame in which it is not valid. 

Proof. Immediate from part (ii) of the completeness theorem. □ 

Corollary 2.25 (Decidability) For all X C {d,t, b,4, 5} it is decidable whether a 
formula is X-valid. 

Proof. By the termination lemma and part (ii) of the completeness theorem. □ 
2.1.4 Syntactic Cut-Elimination 

While cut admissibility is an easy corollary of the completeness theorem, it 
is still interesting to provide a nontrivial procedure which removes cuts from a 
proof. The existence of a step-by-step cut elimination procedure shows a certain 
symmetry, a certain good design of the inference rules. Also, it can serve as a 
starting point for a computational interpretation, maybe along the lines of |32| . 

We now see a cut-elimination procedure which follows the lines of the one for 
system G3 for first-order predicate logic, see for example [50]. The interesting 
twist is that the modalities require some form of multicut, similar to Gentzen's 
original procedure, even though contraction is admissible. Wc first need some 
standard definitions. 

Definition 2.26 (depth of a formula) The depth of a formula A, denoted by 
depth{A)^ is defined as usual: 

depth{p) = depth{p) = 

depth{uA) = depth{OA) = depth{A) + 1 

depth{A aB) = depth{A y B) = max{depth{A), depth{B)) + 1 . 
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Definition 2.27 (cut rank, cut-rank-preserving) Given an instance of the cut rule 
as shown in Figure 12. 4[ its cut formula is A and its cut rank is one plus the 
depth of its cut formula. For r > we define the rule cut^ which is cut with 
at most rank r. The cut rank of a derivation is the supremum of the cut ranks 
of its cuts. A rule is cut-rank (and depth-) preserving admissible for a system 
S if for all r > the rule is (depth-preserving) admissible for S + cut^. A rule 
is cut-rank (and depth-) preserving invertible for a system S if its inverse is 
cut-rank (and depth-) preserving admissible for S. 

The problem with proving cut-elimination in the presence of the rules 04c and 
05c is that these rules, seen upwards, do not decompose their main formula 
OA. If that formula happens to be the cut formula, then we cannot form a new 
derivation by appealing to an induction hypothesis based on a lower rank. We 
thus generalise the cut-rule to incorporate instances of rules 04c and 05c. This 
leads to the following definition. 



Definition 2.28 (Y-cut) Let {A}" denote {A} . . . {A} . For Y C {4, 5} and n > 



with the proviso that there is a derivation from r{0.4}{0yl} to r{Oyl}{0}" 
in system Y. 

Fact 2.29 (Properties of Y-cut) Consider an instance of Y-cut as above. 

If Y = then it is an instance of cut, so n = 0. 

If Y = {4} then r{ }{ }" is of the form ri{{ }, }"}. 

If Y = {5} and n > then the first hole is inside a box, so depth{T{ }{0}") > 0. 
(If Y = {4, 5} then nothing can be said about the context since the proviso is 
trivially fulfilled.) 

Structural modal rules. The rules which are shown in Figure 12.71 are called 
structural modal rules. They are structural in the sense of not affecting connec- 
tives of formulas. The modal rules OXc are all O-rules, in the sense that the 
active formula in the conclusion has O as main connective. Given a set X of 
names of modal axioms, [X] is defined as {[/o] |p <£ X}. The structural modal 
rules have the obvious corresponding frame conditions. 

Wc need the admissibility of these structural modal rules for our cut-elimination 
procedure. In some sense, they are the result of "reflecting" the corresponding 
diamond-rule at the cut. This comment will hopefully become more clear af- 
ter the reduction lemma. The structural modal rules are cut-rank preserving 
admissible, as we will see. 

The case of the seriality is a bit different from the other rules. The rule [d] 
is admissible, but we cannot show this in the presence of cut. Consider the 
problematic case where [d] cannot be pushed above cut: 



n— times 



we define the rule 



Y-cut 



r{nA}{0}" r{OA}{OA} 
r{0}{0}" 



T{[A]} r{[A]} 



cut 
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[d] r{[A]} r{[A, m 



r{0} r{A} r{[A],i]} 



jmM^ r{[A]}{0} , ..r{U0})>o 

" r{[[A],I]]} r{0}{[A]} aepm(Liii\uf) > 



Figure 2.7: Modal structural rules 

So we cannot use [d]-admissibility in the cut-elimination proof. Our solution 
is to eliminate cut in the presence of [d] and only afterwards replace [d] by 
Ode. This means that in the following we always have to consider the possible 
presence of the [d]-rule. 

Before we eliminate the cut we need to make sure that contraction and weak- 
ening can be eliminated without increasing the cut rank. We just strengthen 
Lemma 12.41 (Admissibility of structural rules and invertibility) accordingly to 
get the following lemma. 

Lemma 2.30 (Cut-rEink preserving admissibility of structm-al rules, invertibility) 

Let X = {d, t, b, 4, 5}. For each system K + Y with Y C OXc U {[d]} the following 
hold: 

(i) The rules nec, wk and ctr arc depth- and cut-rank preserving admissible. 

(ii) All its rules are depth- and cut-rank preserving invertible. 

Proof. The proof is just like the one for Lemma (Admissibility of structural 
rules and invertibility) except that we also consider cutr and [d]. In proving 
contraction admissibility there is one more case which is mildly interesting and 
which is handled as follows: 

r{A{A},A{0}} r{A{A},A{0}} 

r{A{0},A{0}} ^ 

r{A{0}} 

r{A{A},A{0}} r{A{l},A{0}} 

wk wk - 



^ T{A{A},A{A}} ^ r{A{A},A{A}} 
r{A{A}} T{A{A}} 
r{A{0}} 

□ 

Lemma 2.31 (Admissibility of the modal structural rules) 

(i) Let X be a 45-closed subset of {t, b, 4, 5} and let p 6 X. Then the rule 
[p] is cut-rank preserving admissible for system K -I- OXc and also for system 
K + OXc + [d]. 

(ii) Let X be a 45-closed subset of {d, t, b, 4, 5} and let d G X. Then the rule [d] 
is admissible for system K -|- OXc. 
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Proof. For (i) the proof works by an outer induction on the number of instances 
of [p] in a given proof, ehminating topmost instances first, and an inner induction 
on the depth of the proof above such a topmost instance. For each rule [p] with 
p € X we make a case analysis on the rule a above [p]. The induction base and 
the cases where a is among the rules a, cut^, [d] and Otc are trivial. We use 
cut-rank preserving admissibility of contraction and weakening provided by the 
previous lemma without explicitly mentioning it. 

[P] - [t] : 



T{OA, [A, A]} 
no A, [A]} 
T{OA,A} 



T{OA, [A, A]} 
T{OA,A,A} 
r{OA,A} 



The case for <t = Obc is similar. 



04,: ■ 



T{OA, [OA, A]} 



[t] 



r{oA [A]} 
r{oA,A} 



[t] 



T{OA, [OA, A]} 
r{OA,OA,A} 

r 

r{oA,A} 



For cr = 05c the case is trivial unless the diamond formula in its conclusion is 
at depth 1. Then there are two cases, either the 05c-rule moves the formula to 
somewhere outside the box that is removed by [t] or somewhere inside it. The 
second case is similar to the first, which is as follows, where p* denotes several 
applications of p: 



05c 



[t] 



[oa],a,j:{oa} 

[OA],A,^m 
OAA,E{0} 



[t] 

04c*,wk*,ctr* 



[oa],a,j:{oa} 

OA,A,^{OA} 
OA,A,S{0} 



[p] = [b] 



Ok, 



T{[A,OA,[A,E]]} 
T{[A,OA, [S]]} 
r{S,[A,OA]} 



[b] 



[b] 

Obc ■ 



T{[A,OA, [A,m 

t{j:,a, [A, OA]} 

r{S,[A,OA]} 



Obc 



T{[A,A, [OA,m 

r{[A,[oAS]]} 



[b] 



r{OA,I], [A]} 



[b] 



Ok, 



T{[A,A, [OA,m 
T{OA,i:,[A,A]} 
- r{OA,E,[A]} 



T{[OA,A, [OA, E]]} 



[b] 



T{[OA,A, [S]]} 

t{j:,[oa,a]} 



[b] 

05c ■ 



T{[OA,A, [OA,m 
T{T.,OA, [OA, A]} 
r{I],[OA,A]} 



For <7 = 05c the case is trivial unless the diamond formula in its conclusion is at 
depth 2 and in the inner box in the premise of [b] . Then there are three similar 
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cases of which we just sec the following one: 

[i],[0A,A]],r{0A} [s,[0AA]],r{0A} 
[s,[oA,A]],r{0} ^ ' oA,A,[i]],r{oA} 

[bl 04c*,wk*,ctr* 

oAA,p],r{0} oAA,[s],r{0} 



[P] = [4] 



T\OA,\A,A]Am [4]-^ ^'^ 

r{OA, [A],[S]} ^ wk.ok, ^ 'U ' J' J/ 



r{OA, A,I]} 04,^^ Li ^' 

r{OA,[[A],S]} 

The case for a = 04c is similar and the case for a = 05c is trivial. 



r{A, OA, A , E } 

T\A,\OA,A],\m IM-^ 

' J'l JJ T\A, \OA, A , E } 

r{[OA,A],[E]} ^ wk.ob, ^ '^^ ' J' J/ 



[P] = [5] 



r{ OA,A ,E } 05c ^i — - — 

r{[[OA,A],E]} 

r{oA,u,Ai}{0| 

T{OA,[A]){%} ^ wk.okc ^ 



r{oA}{A} 05c — - — —-^ 

^ r{OA}{[A]} 

The case for a = 04c is similar and the case for cr = 05c is trivial. For a = Oh^ 
we have: 

r{[A[OAA],q}{0} ^^rnAioAAinm 

r|[[OA, A1,E1U0} wk,okc — 

— ' J' Jn'"/ r{OA,[E]}{[OA,A]} 
r{ [!]]}{ [OA, A]} 05c^ — L^iii^ — '—^ 
^^^^ ' r{[E]}{[OA,A]} 

The proof for (ii) is similar to the one for (i), except that we exclude a = cut,,. 
The case <t = Obc is trivial. 

[P] = [d] : 



r{OA, A]} 
OK— r{OA,\A]} 

r{oA, } ^ odc^^ — 

[d] ^ Liil T{OA} 

T{OA} ^ ^ 

r{OA,[OA]} wk- ^ 



04c-^ Li T{OA,\OA,A\} 

r{oA,f0i} 04c -5^ — - — — 

Id]— — T{OA,\A]} 

r{oA} Ode \ ' 

^ ^ r{oA} 
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r{0A}{[0A]} 

r{OA}{[OA]} T{OA}{OA,[OA,A]} 
r{OA}{[0]} ^ T{OA}{OAM\r ~ 

r{oA}{0} ' r{oA}{oA} 

r{oA}{0} 

□ 

To keep the cut-elimination procedure short and uniform, we define a structural 
rule which moves a box inside a sequent from one place to another. Notice that 
the conditions on the context in the proviso exactly match the conditions in the 
Y-cut-rule: 

Definition 2.32 (Y-str-ruIe) For Y C {4, 5} we define a rule 



r{0}{[A]} 

with the proviso that: 

if Y = then r{ }{ } is of the form r'{{ }, { }}, 

if Y = {4} then r{ }{ } is of the form ri{{ },r2{ }}, and 

if Y = {5} then depthiT{ }{0}) > 0. 

(This means there is no proviso for the case Y = {4, 5}.) 

Lemma 2.33 (Admissibility of Y-str) For 45-closed X C {[d], t, b, 4, 5} and for 

Y C {4, 5} the rule Y-str is cut-rank preserving admissible for system K + X if 

Y C X. 



Proof. For Y = that is trivial. For Y = {4} the rule is derivable as follows: 

r{[A],i]{0}} 
^^^ r{[...[A]...],i]{0}} 

™ ^ r{s{[A]},s{0}} , 

™ r{S{[A]},S{[A]}} 

r{s{[A]}} 

and thus admissible by Lemma l2. 301 (Cut-rank preserving admissibility of struc- 
tural rules) and Lemma 12.311 (Admissibility of the modal structural rules) . For 

Y = {5} the rule coincides with [5] and is thus admissible by Lemma [2.311 For 

Y = {4, 5} an instance of the rule is either an instance of the Y-str-rule for 

Y = {4} or Y = {5} and thus admissible as in the previous two cases. □ 

Lemma 2.34 (Reduction Lemma) Let X be a 45-closed subset of {t, b, 4, 5}, let 

Y be a subset of {4, 5} n X and let either Z = OXc or Z = OXc + [d]. Further, 
let r > and n > 0. 

(i) If there is a proof 
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with Pi and P2 in K + Z + cut^ then K + Z + cut^ h r{0} . 
(ii) If there is a proof 



Y-cut^ 



Pi / \ ■P2 

r{nyl}{0}" T{OA}{OAy 



r{0}{0}" 

with Vi and P2 in K + Z + cut^ then K + Z + cut,, h r{0}{0}" . 

Proof. We prove (i) and (ii) simultaneously by induction on \Vi\ + \P2\- We 
perform a case analysis on the two lowermost rules in Vi and V2 ■ If one of the 
two rules is passive and an axiom then r{0} is axiomatic as well. If one is active 
and an axiom then we have 



CUtr+l ■ 



r{a, a} r{a, a} 



r{a} 

If one rule is passive then we have 




T{-a} 




r{A} T{A} 

r{0} 




r{A} T'{A} 

r{0} 



for case (i) and similarly for (ii). This leaves the case that both rules are active 
and not axioms. For (i) we have: 



T{B} r{C} T'{B,C} 



T{B A C} 



r{s vc} 



r{0} 



T{B} 



wk - 



T{C} 



T{B,C} 




T{B} 



r{0} 



26 



CHAPTER 2. SYSTEMS FOR BASIC NORMAL MODAL LOGICS 



Notice that (i) is a special case of (ii) if A has a modahty as its main connective. 
The remaining case is thus (ii) with both rules active and not axioms, and thus 
on one side the D-rule and on the other side either Okc, Otc or Obc (the cases 
for OA-c and 05c are trivial). The case for the Okc-rule is as follows: 



r{[A]}{[A]} r'{oA}{oA,[A,A']} 



Y-cut^+i ■ 



r{n^}{[A]} 



Ok, 



T'{OA}{OA, [A']} 



Y-str - 



r{[A]}{[A]} 
r{0}{[A],[A]} 

r{0}{[A,A],[AA]} 

r{0}{[AA]} 



□ .wk - 



Y-cut^ 



r{nA}{[A,A]} T'{OA}{OA,[A,A']} 
r{0}{[A,A]} 



r{0}{[A]} 

where the Y-str-rulc is applicable since its condition on the context matches the 
condition in the Y-cut-rule. The Y-str-rulc can be removed by Lemma [5331 (Ad- 
missibility of Y-str), weakening and contraction can be removed by Lemma 12.301 
(Cut-rank preserving admissibility of structural rules) and the instance of Y-cut 
can be removed by induction hypothesis. The cases for Otc and Obc are as 
follows: 



Y-CUtr+l 



nmm T'{oA}{A} 

r{nA}{0} *'r'{oA}{ol} 



r{0}{0} 



and 



Y-str - 



[t] 



r{0}{A} 



□ ,wk - 



Y-cut^ 



r{[A]}{0} 
r{aA}{A} 




r{0}{A} 



r{0}{0} 




r{[A]}{[A]} r'{OA}{A,[OA,A']} 



Y-cut^ 



r{DA}{[A]} 



r'{OA}{[OA,A']} 



r{0}{[A]} 
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^ r{[A]}{[A]} ^ r{[A]}{[A]} 

'2 nmm,A]} ^ r{nA}{A,[A]} r'{OA}{A,[OA,A']} 

r{0}{A,[A]} "^'""^ r{0}{A [A]} 

r{0}{[A]} 

In general the Y-cut, seen upwards, introduces several diamond formulas. One 
of them is special in being in the same position as its dual cut formula in the 
other premise. In the transformations given above, the active formula of the 
diamond-rule above the cut is different from that special formula. That is not 
always the case, of course, but if the two coincide, then the transformations are 
simpler. 

□ 

Theorem 2.35 (Cut-Elimination) Let X be a 45-closed subset of {d,t, b,4, 5}. 
Then we have: 



If K + OXc + cut h r then K + OX^ h T . 



Proof. We first prove the theorem in case that d ^ X. Then it follows from a 
routine induction on the cut-rank of the given proof. The induction step follows 
by another induction, on the depth of the proof. It uses the reduction lemma 
in the case of a maximal-rank cut. In case d G X we first replace instances of 
the rule Ode by instances of the rules Okc and [d], then proceed as before, and 
finally apply Lemma 12.311 (Admissibility of modal structural rules) to replace 
[d] by Ode. □ 

This finishes the section of sequent systems where modal axioms are represented 
as logical rules. The systems cover the entire modal cube and are systematic 
in the sense that there is a one-to-one correspondence between the modal rules 
and the frame conditions. However, unlike Hilbert systems and labelled sequent 
systems, they are not modular in the sense that each combination of modal rules 
is complete for the corresponding class of frames. This forced us to resort to 
formulating the condition of 45-closed systems and proving completeness only 
for those. It is hard to see how to achieving modularity using these systems. 

However, during the cut-elimination procedure we discovered the possibility of 
forming proof systems not using O-rules but using the structural rules shown in 
Figure [^771 on pagcHU 

In particular, the examples from Fact [3TTU] (Incompleteness) which showed that 
systems K + {Otc, 05c} and K + {Obc, 04c} are incomplete are provable in 
systems K + {[t], [5]} and K + {[b], [4]}, respectively: 



[op,[p,p],m] IIP, p], Op] 

[opMm ' [[Pi Op] 

\ [Op, [[P]]] and [[[P]],Op] 

\ opd[p]] , [P],[Op] 

° — I ° — I 

Op,nnp np,nOp 
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T{AaB} r{AvB} 
P nm 1^ r{[A,A]} ,tr.^^^'^^ 



T{nA} r{OA, [A]} r{A} 

uiJML r,i r{[A]} r{[A,[I]]]} 



r{0} r{A} r{[A],i]} 



jmjML r,i r{[A]}{0} ,,u(rfum~.n 
W r{[[A],i]]} r{0}{[A]} rfepi/i(r{ }{0}) > 



Figure 2.8: System Kc+{[d],[t],[b],[4],[5]} 
We consider such proof systems in the next section. 

2.2 Modal Axioms as Structural Rules 

The plan of this section is as follows: we first introduce the sequent systems and 
state soundness, cut-elimination and completeness, which we prove by embed- 
ding a Hilbert system and using cut-elimination. The remainder of the section 
is devoted to proving cut-elimination. The cut-elimination proof is interesting: 
it relies on a decomposition of the contraction rule, similar to what has been 
observed in deep inference systems for propositional logic, where contraction is 
decomposed into an atomic version and a local medial rule [Tl] . 



2.2.1 The Sequent Systems 

System Kc + [X] . Figure 12.81 shows the set of rules from which we form our 
deductive systems. System Kc is the set of rules {a, v, □, k, ctr}. We will look at 
extensions of System Kc with the structural modal rules [X] C { [d] , [t] , [b] , [4] , [5] } 
that we have encountered previously and that arc shown in Figure 12.81 for con- 
venience. Contrary to systems considered in the last section, the systems we 
consider now are not fully invertible and contraction is not admissible for the 
contraction-free systems. Of course it is easy to obtain equivalent systems which 
arc fully invertible and for which contraction is admissible by using system K 
instead of Kc and by absorbing contraction into the modal structural rules. 
However, we choose not to do this because our cut-elimination technique, which 
relies on decomposing contraction, is more natural in a system with an explicit 
contraction rule. 

Soundness of our systems is easily established similarly to soundness of the 
systems in the previous section. 

Theorem 2.36 (Soundness) Let X C {d,t, b,4, 5}. If a sequent is provable in 
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Kc + [X] then its corresponding formula is provable in a Hilbert system for the 
modal logic K extended by the axioms in X. 

Our main result is cut-elimination, which we prove in the next subsection. 

Theorem 2.37 (Cut-Elimination) Let X C {d,t, b,4,5}. If Kc + [X] + cut h T 

then Kc + [X] h r. 

By using cut-elimination we obtain the completeness theorem: 

Theorem 2.38 (Completeness) Let X C {d,t, b,4, 5}. If a formula is provable in 
a Hilbert system for the modal logic K extended by the modal axioms in X then 
it is provable in system Kc + [X] . 

Proof. Given a proof in the Hilbert system we construct a proof in Kc + [X] +cut 
as usual, and then apply Theorem 12.371 (Cut-elimination). We show proofs for 
the modal axioms: 

'-'^itr ■"tW -i^i'i^^i ■ 



dAdOA Ad OA 



A,nOA OA,nnA nA,nOA 



ADnOA nADnnA OA d nOA 



□ 



2.2.2 Syntactic Cut-Elimination 

We first show that weakening and necessitation arc admissible. 

Lemma 2.39 (Weakening and necessitation admissibility) Let X C {d,t, b,4, 5}. 
The wk-rule and the nec-rule are depth- and cut-rank-preserving admissible for 
Kc + [X]. 

Proof. A routine induction shows that a single nec or wk-rule can be eliminated 
from a given proof, a second induction on the number of nec or wk-rules yields 
our lemma. □ 

Similarly to the Odc-rule in the previous section, the [d]-rule is different from 
the other rules: it trivially permutes below the cut. So we can get it out of the 
way and then wc need to prove cut-elimination only for the systems without it. 

Lemma 2.40 (Push down seriality) Let X C {d,t, b,4, 5} and d G X. For each 
proof as shown on the left there is a proof as shown on the right: 
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r{[A,...,A]} T{A,...,A} r{B,...,B]} 

mn mA 

T{nA} r{A^B} 
T{A,...,A} r{A,...,A} r{[A],[E]} r{A,A} 

: med fctr 

r{0} r{[A,s]} T{A} 



Figure 2.9: Multi-rules, medial, and formula contraction 



Proof. By an easy permutation argument, making use of weakening admissibil- 
ity. □ 

We also get contraction out of the way in order to eliminate the cut. First, 
we decompose contraction into the fctr-rule, which is contraction on formulas, 
and the med-rule, shown in Figure 12.91 We permute down the fctr-rule. It 
does not permute down below the rules cut, □ and a, so we generalise these 
rules as in Figure 12.91 We define a contraction-free system as = Kc — 
ctr -I- {med, mn, mA} and will show cut-elimination for that system. But first 
we develop the machinery to show that cut-elimination for leads to cut- 
elimination for Kc (with any [X]). 

Lemma 2.41 (Decompose contraction) The ctr-rulc is derivable for {fctr, med}. 

Proof. By induction the depth of a sequent which is contracted, we show the 
inductive step: 

r{Ai, . . . , A,n, [Ai], . . . , [A„], Ai, . . . , A„„ [Ai], . . . , [A„]} 

ctr 

r{Ai,...,A„,[Ai],...,[A„]} 
r{Ai, . . . , A„„ [Ai], . . . , [A„], Ai, ...,Am, [Ai], . . . , [A„]} 



med^ 



^ T{Ai, . . . , Ai, ...,Arn, [Ai, Ai], . . . , [A„, A„]} 
r{Ai, ...,Am,Ai,...,A^, [Ai], . . . , [A„]} 

fctr™ 

r{Ai,...,A„,[Ai],...,[A„]} 



□ 



Lemma 2.42 (Weakening and necessitation admissibility for Km) 

Let X C {d,t, b,4, 5}. The wk-rulc and the nec-rule are depth- and cut-rank- 
preserving admissible for Km + [X]. 

Lemma 2.43 (From mcut to cut) The rule mcut^ is derivable for {cut,.,wk}. 
Proof. We define the rule mcut™'" with m, n > as 

m-timcs n-timcs 

r{0} 
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and show that rule derivable for {cutr, wk} by induction on m + n. The case for 
m = n = 1 is trivial, for m > 1 and n = 1 we replace 

^ J{A,...,A} r{A} 

mcut^ ■ 

r{0} 

by 

,^ r{A} 
„ ,, r{A...,A} " T{A,A} 

m} r{A} 

r{0} 

and apply the induction hypothesis, and for m,n > 1 we replace 

^_r{A,...,A} r{A,...,A} 

mcut^ ' 

r{0} 

by 

T{A,...,A} T{A,...,A} 

wk wk - 



^ ^^T{A,...,A} T{A,...,A,A} J{A,...,A,A} T{A,...,A} 

mcut^ ' mcut^ ' 

r{A} T{A} 

r{0} 

and apply the induction hypothesis twice. 

□ 

Lemma 2.44 (Push down contraction) Let X C {t, b, 4, 5}. Given a proof as 
shown on the left, with p a single-premise-rule from Km -I- [X] -I- wk, there is a 
proof as shown on the right, with |27'| < 




Km + [X]+mcLt+wk 



Proof. By induction on the length of T> and a case analysis on p. Most cases 
are trivial. We show the two interesting ones. For p = v and p = k we apply 
the following transformations: 

T{A,A,B} 
T{A,A,B} wk- ^ ' ' 



fctr T\A,B,A,B} 
T{A,B} , 1 ' ' . / 



T{A V B} fctr 



T{Av B,Av B} 
T{AvB} 
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r{[A,A,A]} ^ r{[A,A,A]} 

fctr - 



T{[A,A]} ^ T{OA,OA,[A]} , 

k fctr 

T{OA,[A]} T{OA,[A]} 
and in each case we apply the induction hypothesis twice. 

□ 

Proposition 2.45 (Push down contraction) Given a proof as shown on the left, 
there is a proof as shown on the right: 




Proof. We first prove the claim that for each proof as shown on the left there is 
a proof as shown on the right: 




The proof of the claim is by induction on the depth of Vi , using Lemma 12.441 
(Push down contraction). The proof of our proposition is as follows: by using 
Lcmma r2.41l (Decompose contraction) wc obtain a proof in + [X] + cut + fctr, 
we apply our claim, then we use Lemma [2.431 (From mcut to cut), to replace 
mcut, starting with the top-most instances. Finally wc remove weakening using 
weakening admissibility. □ 

It turns out that during the proof of cut-elimination for some system Kc + [X] 
some rules may be introduced that are not in [X] but that logically follow from 
X. These additional rule instances will then be removed from the proof after 
cut-elimination. 

Definition 2.46 (X+) Given some X C {d, t, b, 4, 5} we define 

rXU{4} if {t,5} CXor {b,5} CX 
X+ = ixu{5} if{b,4}CX 
[ X otherwise , 

and likewise for OX and [X]. 



This definition matches the semantical notion of 45-closed that we defined ear- 
lier: 
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Fact 2.47 (X+ is 45-closure of X) If X C {d,t, b,4,5} then X+ is the least set 
which contains X and is 45-closed. 

The following lemma ensures that, after we have eliminated cut, we can indeed 
remove the additional rules in X+ — X. 

Lemma 2.48 (From X+ to X) 

(i) The [4]-rule is derivable for {[t], [5], nec}. 

(ii) The [4]-rule is derivable for {[b], [5], nec}. 

(iii) The [5]-rule is derivable for {[b], [4],wk}. 



Proof. For (i) notice that the [4]-rule is a special case of the [5]-rule unless r{ } 
has depth zero, and thus r{ } = A, { }. In that case we have: 

A, [A],[I]] 



AJAUS] ,JA,[A],[I]] 

[4] . ^ [5] 



A,[[A],I]] j^j[A,[[A],E]] 



A, [[A],E] 

For (ii) we again have to consider only the case where r{ } = A, { }: 

, A,[A],[I]] 
[[A, [A1,[I]111 



.A],[A],S] 

A,[[A],q 

For (iii) notice that a sequent has a tree structure and that, seen upwards, the 
[5]-rule allows to move a boxed sequent [A] to any position in that tree, but not 
to the root. To move a boxed sequent to any position in the tree it is enough if 
we are both able to move it a) from a given node the parent of this node and 
b) to move it from a given node to any child of that node. Point a) is just the 
[4]-rule and point b) is as follows: 

, r{[A,[A]]} 



r{[A, [0],[A]]} 

, r{[A,[[A]]]} 

lb] 



r{[A],[A]} 

□ 



We are now preparing for the reduction lemma, which we prove as usual by 
pushing the cut rule upwards. In general we cannot push the cut above a modal 
structural rule, so we push it upwards together with the cut. The interesting 
case occurs once this conglomerate of cut and modal structural rules needs to be 
pushed above the Ok-rule. Then we have to permute the Ok-rule down through 
the modal structural rules to meet the cut. In the course of this permutation, 
the Ok-rule might turn into another O-rule. The following two lemmas take 
care of these permutations. 
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Lemma 2.49 (Push down 04, 05) Let X C {t, b,4,5} and p 6 (OX n {04, 05}). 
Given a derivation as shown on the left, where p apphes to OA, there is a 
derivation as shown on the right, where all rules in apply to the instance of 
OA shown, and where |X'2| < 

T{OA} ^^t^^ 

p — I?2 [X] + med 

Vi [X]+med ,1 

I . II (OX.n{04,05}) 

^ A{OA} 

Proof. The proof is by induction on the length of T^i . Wc permute the instance 
of p down and apply the induction hypothesis, possibly several times. We only 
show the non-trivial permutations. 

r{[oAA],F]} ^ r{[oA,A],[s]]} 

04 med 

r{OA,[A],[E]} - r{[OA,A,I]]} 

med 04 

r{oA,[A,s]} r{oA,[A,i]]} 

r{OA,A} ^ ^ 

r{[A, [oA,m r{[AjoAs]]} 

04 b 

r{[oA,A,[s]]} ^ ^^ r{oA,[A],s} 
' r{[oAA],s} ^'r{[oAA],E} 

r| [O A, Al , [El } [4] -1^ — L_LLil 
r{OA, A , E } ^ 04 '_J^Jl 

^ '^^ ^' r{OA,[[A],E]} 

^ r{[oA,A]}m r{[oA,A]}{0} 
T{oA, [A]}{0} ^ ^ rmiloAA]} 

r{OA}{[A]} r{OA}{[A]} 

Permuting down the 05-rule is trivial except over the [t]-rule and the [b]-rule, 
and this is also trivial unless the restriction on the depth of the context in the 
05-rule becomes relevant: 

ri,[A],r2{0^} T,,[A],T2{OA} 

^' ri,[oA,A],r2{0} ^ ri,A,r2{oA} 
ri,oA,A,r2{0} ri,oA,A,r2{0} 
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[A,[s]],r{oA} [A,[i]]],r{oA} 
^ fA,[E,oA]],r{0} ^ ^ [A],i],r{oA} 

[b] 04 ■ 



[A],s,oA,r{0} [A],s,oAr{0} 



□ 



Lemma 2.50 (Push down Ok, Ot, Ob) Let X C {t, b,4, 5} and let p = Ok 

or p G (OX n {Ot, Ob}). Given a derivation as shown on the left, where p 
applies to OA, there is a derivation as shown on the right, with a = Ok or 
(J G (OX n {Ot, Ob}), where all rules in apply to the instance of OA shown, 
and where 1252 1 < \T>i\: 

r{A} 

r{yl} V2 II [X]+med 



P 



ri{OA} T3{A} 



Di I [X] + med r2{OA} 

A{OA} Vi II (ox+n{04,05}) 

A{OA} 

Proof. The proof is by induction on the length of Vi . We permute the instance 
of p down and apply Lemma [2.491 (Push down 04, 05) and/or the induction 
hypothesis. We only show the non-trivial permutations. 

r{[AA]} r{[AA]} 
r{oA[A]} ^ ' r{A,A} 

t Ot 

r{oA,A} r{oA,A} 

r{[A,[As]]} r{[A, [AS]]} 

r{[oAAjE]]} - r{A[A]^ 

b Ob 

r{[oA,A],s} r{[oA,A],i]} 

r{[AA],P]} ,,!WUq} 
Ok ' ^'^ r{[[A,A],i]]} 

r{OA,[A],[S]} - Ok, ^' 



4 



r{OA,[[A],I]]} 04 



T{[OA, [A],S]]} 
r{OA,[[A],S]} 

r{[A,A]}{0} 



r{L4,A}{0} [5, 
ow—^^-^-^±J- r{0}{[A,A]} 
r{OA,[A]}{0} ^ Ok ^^^^ ' 



_L — ^ r{0}{oA, A} 

r{oA}{[A]} 05-L-Li — lUI 
^ r{oA}{[A]} 



The cases for p = Ot are trivial. 
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r{[A],A} r{[A,A]} 

r{[A^A]} - ' T{A,A} 



T{A,OA} r{A,OA} 



r{[i],[A],A]} r{[s],[A],A]} 
rmiA^oA]]} - r{[i],A],A} 

[b] Ok 



r{[i]],A,oA} r{[s],A,oA} 

r{[A,OA],[E]} ^ Ob ^' ^' ^ 



^' r{[[A,oA],i]]} 

For permuting down over the [5]-rule, in the only non-trivial case, notice that 
the context has to be of the form shown because of the restriction of context 
depth in the [5]-rule: 

r{0}{[I], [A1,A1} 

rm{\^,\A,oA]]} Ok — ^^^^ 



r{[A,oA]}{[i],0]} 



□ 



Once a O-rule has been permuted down through the structural modal rules to 
meet the cut, we want to build a new derivation with a lower cut rank. This 
is not possible when this O-rule is either 04 or 05 since these rules do not 
decrease the size of the main formula, when seen upwards. The solution is to 
"reflect" them at the cut and incorporate them in the structural rules that are 
pushed up together with the cut. 

Lemma 2.51 (Reflect 04, 05) Let X C {4,5}. Given a derivation as shown on 
the left, where all rules in V apply to the instance of OA shown, then for each 
sequent A there is a derivation as shown on the right: 

T{OAm r{0}{[A]} 

D II ox V' II [X] 

r{0}{oA} r{[A]}{0} 

Proof. By induction on the length of V. □ 
We arc now ready to prove the reduction lemma. 

Lemma 2.52 (Reduction Lemma) Let X C {t, b, 4, 5}. Given a proof as shown 
on the left, with Vi and 1^2 in Km + [X] + cut^, then there is a proof V in 
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Proof. As usual, by an induction on \Vi\ + |7-'2| and a case analysis on the 
lowermost rules in Vi and 7^2- We only show the most complicated case, in 
which we cut a box introduced by the mn-rule against a diamond introduced 
by k-rule. All other cases are much simpler. We have 

r,{[B,...,B]} , mB,A]} 



Ti{nB} T'^{OB,[A]} 

II [X] + med II [X]+med 

T{nB} T{OB} 

CUtr+1 

r{0} 

In the left subderivation we permute down the instance of mn and on the right 
subderivation we apply Lemma 12.501 (Push ktb down) in order to obtain the 
following derivation, where r{ } = r{ }{0}. Note that the second hole in the 
binary context marks the position to which the OB is moved: 

II [X]+med 



Ti{[B,...,B]} TsiB} 



II [X] + med r{0}{OS} 

r{[S,...,B]}{0} (x+n{4,5})* 

mn 11 

r{nB}{0} r{os}{0} 

cutT-+i 

r{0}{0} 

By using Lemma [2.511 (Reflect 45) we obtain a derivation T> and build: 
T,{[B,...,B]} 

II [X]+med 

T{[B,...,B]m n{[B,A]} 

V II (X+n{4,5})- II [X]+med 

T{%}{[B,...,B]} T^{B] 



mn - 
cut^ 



r{0}{Dg} r{0}{o^} 

f{0}{0} 



We now consider the three possible cases for a G {k, Ot, Ob} and apply one of 
the following transformations to the relevant part of the proof: 

Y.{[B,...,Bl[A]] I]{[g,A]} S]{[i3,...,i3],[A]} 

mn k med _ 

S{ni3,[A]} S{OB,[A]} ^ I]{[S,...,i?,A]} S{[i3,A]} 

cutT^4-i mcut^ 

S{[A]} E{[A]} 
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mn Ot — t 

S]{nB} S{OB} ^ T,{B} 

cutj^+i mcutj. 

S{0} S{0} 



S{[[i3,...,i?],A]} E{SJA]} 

mn Ob = b 

E{[Di3,A]} S{[OB,A]} ^ J:{B,...,B,A]} [A]} 

cutr-Li mcutr 

E{[A]} S{[A]} 

We then eliminate mcut by using Lemma [233] (From mcut to cut) and weakening 
admissibility. □ 

Proposition 2.53 (Cut-elimination for K^) Let X C {t, b,4, 5}. If Km + [X]+cut h 
F then + [X]+ h F. 

Proof. We first prove the claim: If Km + [X]+cutr+i h F then Km + [X] + +cut,. h F. 
The claim is proved by induction on the depth of the given proof, using the 
reduction lemma. Our proposition then follows from an induction on the cut 
rank of the given proof, using the claim. □ 

Finally, we can prove cut-elimination for the systems Kc + [X] . 

Proof of Theorem \2.37\ (Cut- elimination). We first prove the theorem for the 
cases where d ^ X. The transformation (i) is by Proposition 12.451 fPush down 
contraction), the transformation (ii) is Proposition 12.551 fCut-elimination for 
Km), and transformation (iii) is by Lemma l2.48l (From X+ to X) and weakening 
and neeessitation admissibility. 





In the cases where d S X we first apply Lemma 12.401 (Push down seriality) and 
then proceed the same way with the upper part of the proof. □ 



2.3 Relation to Deep Inference 

Deep inference is a proof-theoretic formalism introduced by Guglielmi |26j where 
inference rules are term rewriting rules which work on formulas and where 
derivations are just reduction sequences from one formula to another. Some 
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deep inference systems for modal logic have been studied by Hein, Stewart and 
Stouppa HiSillT]. 

Stewart and Stouppa give certain deep inference rules for the modal axioms in 
their paper and conjecture that all combinations yield cut-free systems that 
are complete for the corresponding frame conditions (Conjecture 11 in 1461 ) . 
They prove their conjecture just for some modal logics, namely K, KD, KT, S4 
and S5, and in all cases their method is embedding a cut-free (hyper-) sequent 
system. They do not provide cut-free deep inference systems for the other 10 
logics of the cube. Also, their method does not extend to logics for which there 
is no known cut-free (hyper-)sequent system, such as KB and K5. 

In this section we see cut-free deep inference systems for these modal logics. 
Nested sequent systems can be easily embedded into corresponding deep infer- 
ence systems and via this embedding we get complete and cut-free deep inference 
systems for all the modal logics considered in this chapter. In fact, we get two 
sets, one based on the nested sequent systems with logical rules, and one based 
on the ones with structural rules. However, this does not settle Stewart and 
Stouppa's Conjecture 11, since our rules are different. 

The embedding of nested sequent systems into corresponding deep inference 
systems is trivial: essentially, all derivations on nested sequents are special 
deep inference derivations where rules do not apply deeply with respect to all 
connectives, but only with respect to the comma (structural disjunction) and 
structural box. The reverse direction, embedding deep inference into nested 
sequent calculus is also easy, but requires cut. 

In this section we extend our language of formulas by the constants t for true 
and f for false. 

A deep inference rule is just a labelled rewrite rule as used in term rewriting. 
An example is the following switch- down-rule: 

5{Aa(BvC)} 
S{iAr.B)vC} 
which in term rewriting would be written as 

s; : (A A S) V C ^ A A (S V C) 

There is a notational difference: in the deep inference rule the context in which 
it can be applied is made explicit, in this case any formula context S*! }. A 
proof of a formula is a rewriting sequence starting from the constant t and 
ending with that formula. For more explicit definitions and more discussion of 
deep inference systems, see [9]. 

A deep inference system for propositional logic is shown in Figure 12.101 This 
particular system is similar to the one given by Strafiburger in |48) and slightly 
weaker than the one originally given in because it replaces the equivalence 
rule by several explicit rules for for commutativity, associativity and units (which 
together are weaker than the equivalence rule). Let us call it system KS for the 
purpose of this section. Systems for modal logics can be obtained from it by 
adding rules from Figure 12.111 The cut in deep inference has the form 

S{A^A} 

it 

S{f} 
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S{A^{BvC)} S{AvB} S{A} S{A} 

asj, C04. f-l - 



S{{AvB)vC} S{BvA} S{Avf} S{A At} 

5{t} S{Aa{BvC)} S{AyA} S{f} 



S{ava} S{{AaB)vC} S{A} S{A} 



Figure 2.10: A deep inference system for propositional logic 



Let an instance of 5| be an instance of either SaJ., 5h-l or 5c|. For a set X of 
rule names append the symbol J, to each name to obtain X^,. Let system KSk 
be system KS + {nec|, kj,, rj,}. 

Proposition 2.54 (Nested sequent calculus into deep inference) 

For all X C {d, t, b, 4, 5} and scqucnts F we have that: 
If K + OXc h F then KSk + X; h F^. 



Proof. A routine induction on the depth of the proof and a straightforward 
extension of a corresponding embedding for the propositional system as given 
in [9]. Note that embedding the A-rule requires the rj,-rule. □ 

Proposition 2.55 (Deep inference into nested sequent calculus) 

For allXC{d,t,b,4,5} and formulas A we have that: 
If KSk + X; + it h A then K + OXc + cut h A. 



Proof. A routine induction on the length of the proof and a straightforward 
extension of a corresponding embedding for the propositional system as given 
in 0. □ 



These propositions, together with cut-elimination for our nested sequent sys- 
tems, trivially yields cut-elimination for the corresponding deep inference sys- 
tems. By the second proposition we translate a deep inference proof with cuts 
into a nested sequent calculus proof with cuts, eliminate the cuts, and translate 
back to deep inference by the first proposition. 

Corollary 2.56 (Cut elimination for deep inference) 

For all 45-closed X C {d, t, b, 4, 5} we have that if a formula is provable in system 
KSk + XJ, + it then it is also provable in system KSk + XJ,. 

A similar exercise will obtain cut-free and complete deep inference systems from 
the nested sequent systems with structural modal rules. 

Remark 2.57 (for some systems the r^-rule is admissible) Some of the deep 
inference systems are not minimal: for example in system KSk the r^-rule is 
admissible for KSk — r^. This can be seen by embedding the usual sequent 
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S{t} S{n{AvB)} S{nA^nB} 

necJ, kl rl 

S{nt} S{nAvOB} S{n{A/\B)} 

S{nA} S{A} S{A^nB} S{n{A^OB)} 

'^^ S{OA} S{OA} S{n{OAv B)} S{nAv OB} 

S{OAvnB} S{nB^n{OA^C)} S{n{Av n{OB ^ C))} 

Bal 5bJ, 5cJ, 

S{n{OAyB)} 5{n(OAvB) V nC} 5{n(yl v OS v nC)} 

Figure 2.11: Deep inference rules for modal logic 

system for K, of which we show the case for the D-rule: 

t 

nec^ 

□ t 

a{A V Bi V ... V Bn) 
aA V OBi V ... V OBn 

where V' is the translation of V, uV is obtained by adding a box to every 
formula in V' and k" denotes n instances of the k-rule. For some systems, 
however, the rj,-rule is not admissible. For example in system KSk + h\. the 
formula u{a y OOa) a (6 v OOb)) is provable, but it is not provable without 
r^-rule. 




A,Bi, . . . ,Bn 
° UA, OBi,...,OB, 



2.4 Discussion 



We have seen how nested sequcnts allow us to give a systematic proof theory 
for the modal logics of the cube. In fact, we have seen two distinct proof- 
theories, one based on formalising modal axioms as logical rules and one based 
on formalising modal axioms as structural rules. The first option is closer to the 
ordinary sequent calculus and allows for a straightforward terminating proof- 
search procedure, but fails to be modular: not every possible combination of 
rules yields a complete system for the corresponding logic. The second option 
yields a modular set of systems, but the presence of structural rules devalues the 
subformula property. In any case, we have seen that generalising hypersequents 
to nested sequents yields cut-free systems for more modal logics, so it leads to 
greater expressivity. It is particularly pleasant that this extra generality does not 
come at the cost of extra complexity, but in fact simplifies hypersequent systems: 
the two kinds of context in hypersequent inference rules (sequent context and 
hypersequent context) are merged into one. Our systems with logical rules 
enjoy invertibility of all rules. This property does not seem to be achievable 
in an ordinary sequent system for modal logic. In hypersequent systems it also 
does not seem to be achievable in a non-trivial way (although one could of course 
trivially make rules invertible by copying a component whenever a rule applies 
in it). 
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Relation to the display calculus. Nested sequents and display sequents share 
the idea of simply allowing the connective □ as a structural connective. There 
are two crucial differences. First, display sequents also contain a structural 
connective for the backward-looking modality. This is crucial for the display 
property to hold, a central property of display calculi which allows to single 
out a formula in order to apply a logical rule to it. Since in our proof systems 
logical rules apply deeply inside nested sequents, there is no need for a display 
property, and thus no need for the backward-looking modality, so we can stay 
inside the modal language. The second difference is that in the display calculus 
one has to use structural rules called display postulates to move a formula to 
the top in order to apply a logical rule to it. In nested sequent systems one 
can apply the rule on the spot and thus has no need for such structural rules. 
Nested sequents thus allow for deductive systems with fewer rules and shorter 
derivations. 

Relation to labelled systems. The main conceptual advantage of a nested se- 
quent over a labelled sequent is that it can be read as a modal formula. Labelled 
sequents are more general than nested sequents: they can form an arbitrary 
graph, while nested sequents arc always trees. A cut-free proof in nested se- 
quents is thus in general a more restricted, simpler object than a cut-free proof 
in labelled sequents. I hope that this fact will help in using nested sequent 
systems for interpolation proofs, for which labelled systems do not seem to be 
well-suited. It should also be easy to embed cut-free nested sequent systems 
into corresponding cut-free labelled sequent systems, while the opposite is not 
true in general. I thus think of the completeness of a nested sequent system 
as a stronger result than the completeness of a corresponding labelled sequent 
system. To get this stronger result we had to work harder, for example in our 
completeness proof for the systems with logical rules: we had to establish cer- 
tain properties of, say, the euclidean closure of a relation, which is not needed 
for labelled systems. There, that relation is part of the proof system and it is 
being closed under euclideanness by the appropriate inference rule. The extra 
work also shows in our cut-elimination procedure: we had to show admissibility 
of certain rules in order to push the cut over the rules for the frame properties. 
This, again, is not needed for labelled systems. There the rules for the frame 
conditions do not affect the cut-elimination procedure at all. 

Relation to tableau systems. While the focus of tableau systems is on giv- 
ing decision procedures, our focus is on giving proof systems which support 
proof-transformations, in particular cut-elimination. This is more easily and 
more commonly done with local rules, so in sequent systems instead of tableau 
systems. Nevertheless, there is correspondence between tableau systems and 
sequent systems. For an overview of modal tableau systems see the survey by 
Gore [22]. The tableau formalism which corresponds most closely to nested 
sequents is the prefixed tableau formalism, due to Fitting [19| . In particular, 
prefixes impose the same tree structure on formulas that is imposed in a nested 
sequent. However, prefixed tableaux are closer to the semantics. In particular 
they have rules which are parametrised by an accessibility relation, which is a 
marked difference from our inference rules. 

Specific tableau rules which correspond to our inference rules have also been 
studied before, namely by Castilho et. al. [TB]. Their systems are based on 
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graphs rather than trees, but they have structural rules which closely corre- 
spond to (some of) ours and propagation rules which correspond to our O-rules. 
A difference is that propagation rules and structural rules are mixed in |16] . 
while here we first treat systems purely consisting of propagation- or O-rules in 
Chapter 2 and systems purely consisting of structural rules in Chapter 3. 

Future work. Of course we would like to extend the range of logics for which 
there are cut-free nested sequent systems. Candidates are the set of modal 
logics formalised by so-called primitive axioms, which have been captured in the 
display calculus |52j . At the same time, it is interesting to generate such systems 
automatically, so it is our goal to devise 1) easily checkable criteria on rules, 
which guarantee cut-elimination, and 2) a procedure which turns modal axioms 
into rules which satisfy these criteria. Such a generic cut-elimination procedure 
exists already for the display calculus [55]. Recently, such a procedure has also 
been proposed by Ciabattoni et al. for certain hypersequent systems [17] . 

On the other hand, we would like to use nested sequent systems to obtain results 
which arc harder or cannot be obtained with other proof-theoretic formalisms. 
Neither display calculus nor labelled sequent calculus seem to allow us to prove 
interpolation results, for example. Conscrvativity results arc another interesting 
field. Here the property of staying inside the modal language is useful. The 
conscrvativity of tense logic over modal logic is an immediate consequence of 
the completeness of a cut-free nested sequent system for tense logic, as noted 
by Gore et al. |24j . This conscrvativity result is not an immediate consequence 
of cut-elimination in the display calculus, precisely because of the presence of 
(rules affecting) backward-looking structural connectives. 

Another area to explore is the one of explicit modal logics [4| . Here the modality 
in modal logic which can be read as provability or as knowledge is replaced by 
specific terms which can be read as individual proofs or as pieces of evidence. 
Researchers study realisation-procedmes which turn a proof in modal logic into 
a proof in explicit modal logic. Such procedures rely on cut-free systems for 
modal logics. Nested sequent systems may provide such realisation procedures. 
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Chapter 3 



Systems for Common 
Knowledge 

The notion of common knowledge is well-studied in epistemic logic, where modal- 
ities express knowledge of agents. Two standard textbooks on epistemic logic 
and common knowledge in particular, are |18j by Fagin, Halpern, Moses, and 
Vardi and [33] by Meyer and van der Hoek. 

The fact that a proposition A is common knowledge can be expressed by the 
infinite conjunction "all agents know A and all agents know that all agents 
know A and so on" . In order to express this in a finite way we can use fixpoints: 
common knowledge of A is then defined to be the greatest fixpoint of the function 

X I— > everybody knows A and everybody knows X. 

Such a definition was introduced by Halpern and Moses |27j and further studied 
in [H]. 

The traditional way to formalise common knowledge is to use a Hilbert-style 
axiom system. Such a system has a fixpoint axiom, which states that common 
knowledge is a fixpoint, and an induction rule, which states that this fixpoint is 
the greatest fixpoint. However, this approach does not work well for designing 
a Gentzen-style sequent calculus. In particular, Alberueci and Jager show in [5] 
that a cut-free sequent system designed in this way is not complete. 

To obtain a complete cut-free system Alberueci and Jager replace the induction 
rule by an infinitary w-rule. This results in a system in which proofs have 
transfinite depth and in which common knowledge is the greatest fixpoint of 
the function described above. Although this system has been further studied in 
|31l[^ . no syntactic cut-elimination procedure has been found. Cut-elimination 
was proved only indirectly by showing completeness of the cut-free system. No 
non-trivial bound on the depth of proofs in this system is known. 

In this chapter, we give a syntactic cut-elimination procedure for an infinitary 
system of common knowledge based on nested sequents. Since its inference rules 
apply deeply inside of the nested sequents we call this system "deep" while we 
call the system by Alberueci and Jager "shallow". The deep system allows 
to straightforwardly apply the method of predicative cut- elimination, which is 
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a standard tool for the proof-theoretic analysis of systems of set theory and 
second order number theory, see Pohlers [311 HD] and Schiitte [IS] . Since the 
shallow and the deep system can be embedded into each other, this also yields 
a syntactic cut-elimination procedure for the shallow system. For both systems 
we thus obtain an upper bound of ip20 on the depth of proofs, where ip is the 
Veblen function. 

Please note that, like Albcrucci and Jager, our term logic of common knowledge 
refers to the least normal modal logic K, with an added fixpoint modality. Some 
people might prefer to call that the logic of common belief. The methods in- 
troduced here should transfer easily to cases where rules for the modal axioms 
arc added that were studied in the previous chapter. The combination of the 
techniques presented here and the ones in the previous chapter should suffice to 
get cut-elimination for modal logics with additional modal axioms and common 
knowledge. 

Several cut-free systems for logics with common knowledge exist already. The 
one that is closest to our system was introduced by Tanaka in |49| for predicate 
common knowledge logic and is based on Kashima's ideas. It essentially also 
uses nested sequents, but uses explicit labels to name the nodes of the tree. 
In fact, if one disregards the rather different notation and some choices in the 
formulation of rules, then one could say that our system is the propositional part 
of Tanaka's system. There are also finitary systems. Abate, Gore and Widmann, 
for example, introduce a cut- free tableau system for common knowledge in [T]. 
Cut-free system have also been studied in the context of explicit modal logic by 
Artemov [S] and by Antonakos [3]. 

However, we do not know of syntactic cut-elimination procedures for any of 
the systems mentioned. Typically, cut-elimination is established only indi- 
rectly. There are cut-elimination procedures for similar logics, for example by 
Pliuskevicius for an infinitary system for linear time temporal logic in }37j . For 
linear temporal logic there is no need for nested sequents. For this logic it is 
enough to use indexed formulas of the form which denotes A at the i-th 
moment in time. 

This chapter is organised as follows. We first review the shallow sequent sys- 
tem by Alberucci and Jager and show the obstacle to cut-elimination. We then 
present our nested sequent system, prove the invertibility of its rules, the ad- 
missibility of the structural rules and finally cut-elimination. Then we embed 
the shallow system into the deep system and vice versa, thus establishing cut- 
elimination for the shallow system. Then, by embedding the Hilbert system into 
our deep sequent system, we obtain an upper bound for the depth of proofs in 
both the shallow and the deep system. Some discussion about future work ends 
this chapter. 



3.1 The Shallow Sequent System 

Formulas and sequents. We are considering a language with h agents for some 
h > 0. Propositions p and their negations p are atoms, with p defined to be p. 
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r,p,p A^^. — V 



o.r, ^A, a,A, s 



r, n'^A for all fc > 1 ^ r, ^A, OA 

S — ■ = -. = <8> ■ 



T,mA r,OA 



Figure 3.1: System Gc 



Formulas are denoted by A, B, C, D. They are given by the following grammar: 

A::^p\p\{AvA)\{A/\A)\ 0,A \ niA \OA\mA , 

where 1 < i < h. The formula OiA is read as "agent i knows A" and the 
formula WiA is read as "A is common knowledge". The connectives Oi and S 
have Oi and <S> as their respective De Morgan duals. Binary connectives are 
left-associative: Ay B v C denotes {{A v B) \/ C), for example. 

Given a formula A, its negation A is defined as usual using the De Morgan laws, 
Ad B is defined as A v S and _L is defined as p Ap for some proposition p. The 
formula nA is an abbreviation for "everybody knows A" : 

nA= OiA A . . . /\ OhA and OA = OiAy...vOhA. 

A sequence of n > modal connectives can be abbreviated, for example 

n"-A^n_^^A . 

n— times 

A (shallow) sequent is a finite multiset of formulas. Sequents are denoted by 

r,A,A,n,E. 

Inference rules. In an instance of the inference rule p 




the sequents Fi , r2 . . . are its premises and the sequent A is its conclusion. An 
axiom is a rule without premises. We will not distinguish between an axiom and 
its conclusion. A system., denoted by iS, is a set of rules. Figure [23] shows system 
Gc, a shallow sequent calculus for the logic of common knowledge. Its only axiom 
is called identity axiom. Notice that the S-rule has infinitely many premises. If 
F is a sequent then OjF is obtained from F by prefixing the connective O,; to 
each formula occurrence in F, and similarly for other connectives. 

Derivations and proofs. In the following, a tree is a tree in the graph-theoretic 
sense, and may be infinite. A tree is well-founded if it does not have an infinite 
path. A derivation in a system 5 is a directed, rooted, ordered and well-founded 
tree whose nodes are labelled with sequents and which is built according to the 
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, r T,A,A r,A A,A 

wk ^ , ctr — — cut- ' 



r,A T,A r,A 

Figure 3.2: Weakening, contraction and cut for system Gc 

inference rules from S. Derivations are visualised as upward-growing trees, so 
the root is at the bottom. The sequent at the root is the conclusion and the 
sequents at the leaves are the premises of the derivation. A proof of a sequent 
r in a system is a derivation in this system with conclusion T where all leaves 
are axioms. Proofs are denoted by V. We write 5 h F if there is a proof of F in 
system S. Given a proof V we denote its depth by \V\. Notice that derivations 
here are in general infinitely branching, thus their depth can be infinite even 
though each branch has to be finite. 

Formula rank. Notice that formulas in the premises of the S-rule are generally 
larger than formulas in its conclusion. This is typically a problem for cut- 
elimination, but we can easily solve this by defining an appropriate measure. 
For a formula A we define its rank rk{A) as follows: 

rk{p) = rk{p) = 

rfc(A A B) = rk{A v B) = max{rk{A), rk{B)) + 1 
rfc(D,;A) = rfc(OjA) = rk{A) + 1 
rk{mA) = rk{'%>A) = uj + rk{A) 

Lemma 3.1 (Some properties of the rank) For all formulas A we have that 

(i) rk{A) = rk{A), 
ill) rk{A) < ij?, 

(in) for all fc < a; we have rk{u^ A) < rk{mA). 

Proof. Statements (i) and (ii) are immediate. For (iii), an induction on k yields 
that rk{o''A) = rk{A) + k ■ h. By (ii) it is then enough to check that for all k 
and all a < oj^ we have a + k- h<LL> + a. □ 



Cut rank. The cut rank of an instance of cut as shown in Figure l3T2l is the rank 
of its cut formula A. For an ordinal 7 we define the rule cut-y which is cut with 
at most rank 7 and the rule cut<-y which is cut with a rank strictly smaller than 
7. For a system S and ordinals a and 7 and a sequent F we write 5 |-;^ F to say 
that there is a proof of F in system S + cut<-y with depth bounded by a. We 
write S F to say that there is an ordinal ao < a such that S |-^ F. 

Admissibility and invertibility. An inference rule p is depth- and cut-rank- 
preserving admissible or, for short, perfectly admissible for a system S if for 
each instance of p with premises Fi, F2 . . . and conclusion A, whenever 5 l-::^^ F^ 

for each premise F^ then 5 |-^ A. For each rule p there is its inverse, denoted 
by p, which has the conclusion of p as its only premise and any premise of p as 
its conclusion. An inference rule p is perfectly invertible for a system 5 if p is 
perfectly admissible for S. 

We omit the proof of the following lemma, which is standard. 
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Lemma 3.2 (Admissibility of the structm-al rules and invertibility) 

(i) The rules weakening and contraction from Figure are perfectly admissible 
for system Gc- 

(ii) All rules of Gc except for the Di-rule are perfectly invcrtible for system Gc- 



3.1.1 The Problem for Cut-Elimination 



Let us look at the problem of cut-elimination in system Gc- Consider the fol- 
lowing proof: 



□i 




i<fe<(j 



cut 

Here the inference rule above the cut on the left does not apply to the cut 
formula while the inference rule on the right does. The typical transformation 
would push the left rule instance below the cut, as follows: 




l<k<ui 



□,A,o,r,E,o,A 

However, this transformation introduces the in O^A, and thus it does not 
yield a proof of the original conclusion. This problem is caused by the context 
restriction in the Di-rule. 

Such a context restriction also occurs in the standard sequent calculus for the 
modal logic K. While it destroys invertibility, at least it does not cause any 
difficulties for syntactic cut-elimination for K. However, we see that the context 
restriction poses a genuine problem for logics with more modalities like in the 
logic of common knowledge. In the next section we will see how a more general 
format for sequcnts and inference rules solves the problem since it does not 
require context restrictions. 



3.2 The Nested Sequent System 

Nested sequents. A nested sequent is a finite multiset of formulas and boxed 
sequents. A boxed sequent is an expression [rj^ where F is a nested sequent and 
1 < i < h. The letters F, A,A, H, S from now on denote nested sequents and 
the word sequent from now on refers to nested sequent, except when it is clear 
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from the context that a sequent is shallow, such as a sequent appearing in a 
derivation in Gc- A sequent is always of the form 

Ai,...,A™,[Ai],;,,...,[A„],„ , 

where the ij denote agents and thus range from 1 to h. As usual, the comma 
denotes multiset union and there is no distinction between a singleton multiset 
and its element. 

Fix an arbitrary linear order on formulas. Fix an arbitrary linear order on boxed 
sequents. The corresponding formula of a non-empty sequent F, denoted Fp, is 
defined as follows: 

Al,...,A„,[Ai]^,,...,[A„],„ ^ = ^1 V ... V A,n V nil Alp ^ ■ • • ^ 0^r^^ 7 

where formulas and boxed sequents are listed according to the fixed orders. The 
corresponding formula of the empty sequent is _L. A sequent has a corresponding 
tree whose nodes are marked with multisets of formulas and whose edges are 
marked with agents. The corresponding tree of the above sequent is 



{Ai,...,A^} 




tree{Ai) tree{A2) ■■■ tree{An-i) iree(A„) 

where iree(Ai) . . . tree(A„) are the corresponding trees of Ai . . . A„. Often we 
do not distinguish between a sequent and its corresponding tree, for example 
the root of a sequent is the root of its corresponding tree. 

Formula contexts and sequent contexts. A formula context is a formula with 
exactly one occurrence of the special atom { }, which is called the hole or the 
empty context. A sequent context is a sequent with exactly one occurrence of 
the hole, which does not occur inside formulas. Formula contexts are denoted 
by A{ },B{ }, and so on. Sequent contexts are denoted by F{ }, A{ }, and so 
on. Formally, sequent contexts are generated inductively as follows: if A is a 
sequent then A, { } is a sequent context, and if A is a sequent and F{ } is a 
sequent context, then A, [F{ }] is a sequent context. 

The formula A{B} is obtained by replacing { } inside A{ } hy B and the 
sequent FjA} is obtained by replacing { } inside F{ } by A. For example, if 
F{ } - A, { }]2 and A = C, [D^ then 

r{A} = A, [[Bl,C,[D]3h • 

Formally, given a sequent A and a sequent context F{ } then FjA} is defined 
inductively as follows: if F{ } = ri,{ } then F{A} = ri,A and if r{ } = 
Fi,[r2{}] then F{A} = ri,[F2{A}]. 

The corresponding formula context of a sequent context F{ }, denoted F{ } is 
defined as follows: 

r, [A{ }].,^ = r,vD. A{ }^ 
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rfe,-} .Ji^LJXi^ ^, r{A,B} 



T{AaB} r{A^B} 
T{[A],} T{0,A,[A,A],} 



r{n,A} ' r{o,A,[A],} 



^ rjp^A} for all k > 1 ^ T{'S>A,0''A} 



T{sA} r{^A} 



Figure 3.3: System Dc 



r , r{0} r{A,A} t{A} t{A} 

nec-™— wk ctr — ' cut ■ ^ ^ ^ ' 



[r], r{A} r{A} r{0} 

Figure 3.4: Necessitation, weakening, eontraetion and cut for system Dc 



Figure 15751 shows our nested sequent system Dc- Figure 157^ shows the structural 
rules necessitation, weakening and contraction as well as the rule cut, which are 
associated to system Dc. Notice that the rules of system Dc and the associated 
rules are different from the corresponding rules in system Gc but have the same 
names. If we refer to a rule only by its name then it will be clear from the context 
which rule is meant. For example the cut in Gc + cut is the one associated to 
system Gc and the one in Dc + cut is the one associated with system Dc- 

Lemma 3.3 (Admissibility of the structm-al rules and invertibility) 

(i) The rules necessitation, weakening and contraction from Figure 13.41 are per- 
fectly admissible for system Dc. 

(ii) All rules in Dc are perfectly invertible for Dc. 



Proof. Admissibility of necessitation and weakening follow from a routine in- 
duction on the depth of the proof. The same works for the invertibility of the 
A, V, Dj and lU-rules in (ii). The inverses of all other rules are just weakenings. 
For admissibility of contraction we also proceed by induction on the depth of 
the proof tree, using invertibility of the rules. The cases for the propositional 
rules and for the Di, S, <S>-rules are trivial. For the O^-rule we consider the for- 
mula OiA from its conclusion FjOjA, [A]i} and its position inside the premise 
of contraction AjE, E}. We have the cases 1) OiA is inside E or 2) OiA is inside 
A{ }. We have two subcases for case 1: 1.1) [A]i inside A{ }, 1.2) [A]i inside 
S. There are three subcases of case 2: 2.1) [A]i inside A{ } and 2.2) [A].; inside 
S, 2.3) E, S inside [A]i. All cases are either simpler than or similar to case 2.2, 
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which is as follows: 

A'{0,A,S',[A,A1,,S'JA1J 

ctr ^ ' ' — ^' A'{0,A,E',[A,Aia 
A'{0,A,S]',[A]a o. ^ ' ' — Ll^Jli 

^ ^ A'{0,A,S',[A],} 

where the instance of in the proof on the right is removed because it is 
perfectly admissible and the instance of contraction is removed by the induction 
hypothesis. □ 

Lemma 3.4 (Derivability of the general identity «Lxiom) For all contexts r{ } 

2- rk( A) — 

and all formulas A we have Dc | — A}. 

Proof. We perform an induction on rk{A) and a case analysis on the main 
connective of A. The cases for atoms and for the prepositional connectives are 
obvious. For A = HiB and A = \*}B we respectively have 

r{[B,B]„0,B} r{n^B,O^B} 



T{[B]i,OiB} and : T{n''B,^B} 



l<k<uj 



T{^^B,OiB} T{mB,'^B} 



On the left by induction hypothesis we get a proof of the premise of depth 
2-rk{B) and thus a proof of the conclusion of depth 2-rA;(i?)+2 = 2-{rk{B)+l) ~ 
2 ■ rk{niB). On the right by Lemma |3. II we can apply the induction hypothesis 
for each premise to get a proof of depth 2- rA;(n'"'_B) = 2-{rk{B) + k-h) and thus a 
proof of the conclusion of depth 2- (rA;(i3)+w) < 2-{uj + rk{B)) ^2-rk{mB). □ 



3.3 Cut-Elimination for the Nested System 

We first need some notions concerning ordinals. For an introduction to ordinals 
we refer to Schiitte [45) . We write a # /3 for the natural sum of a and (3 which, 
in contrast to the ordinary ordinal sum, does not cancel additive components. 
In particular, the natural sum is commutative. To give names to the ordinals 
which measure our proofs we also need the following definition. 

Definition 3.5 (Veblen function) The binary Veblen function ip is generated in- 
ductively as follows: 

1. ¥'o/3:=w^ 

2. if a > 0, then (paf3 is the (/? + l)th common fixpoint of the functions 
^ i~> ipj£_ for all 7 < a. 

The Veblen function just generates an increasing sequence of ordinals, as follows: 
ipoO = = 1, ipol = = w, . . . , ipoLo = uj", 

(fiiQ ~ first fixpoint of the function ^ (po£, = ^ ^ i^^) = £o, ■ ■ ■ , 
(P2O = first fixpoint of the function t-^ cpi^ = S, ■ ■ ■ 

Here we will only need ordinals up to ip20. In this subsection we write \^ T for 
Dc r. We now prove the central lemma. 
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Lemma 3.6 (Reduction Lemma) If there is a proof 



r{A} T{A} 



with Vi and V2 in Dc + cut<-y then 



r{0} 

l\'Pl\#\V2\ 



r{0}. 



Proof. By induction on |7'i|#[P2|- We perform a case analysis on the two 
lowermost rules in the given proofs. If one of the two rules is passive and an 
axiom then r{0} is axiomatic as well. If one is active and an axiom then we 
have 



cuto ■ 



r{p,_p} T{p,p} 



r{p,p} 
r{p} 



I "^2 I I I I I 

and by contraction admissibility we have | r{p} and thus | ^ ^ r{p}. 
If some rule p is passive then we have 





r.{0} 



r{0} 

where i ranges from 1 to the number of premises of p. By invcrtibility of p we 

I I I I I ' I 

get I ^ FijA}, thus by induction hypothesis | ^ ri{0} for all i and by 

p we get I '-^ r{0}. 

This leaves the case that both rules are active and neither is an axiom. We 
have: 
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T{ B} T{C} 

r{B A c} 



r{B,c} 

T{B V C} 



r{0} 




r{c} 
r{s,c} 



r{i?,c} 



r{i?} 



r{0} 

where by weakening admissibility we get 



\'Pl2\ 



we get |-^ r{0} for a 
thata< |Pi|#|7'2|. 



T{B, C}, and since a < a + l = 7 
maxdViili max{\T'i2\, |'P2i|) + 1) + 1. It is easy to check 




r{[A].,[A]a 

T{[A],,n,A} 




r{[A,A],,0,A} 
T{[A],,0,A} 



mm 



wk" 



r{[A]„[A],} 



wk.n^ ■ 



r{[A]„[A],} 



r{[A,A]„[A,A]J ■ r{[A,A]„n,A} r{[A,A]„0,A} 

cut„+i 



r{[A,^]j 



r{[A]j 

where the premises of the upper cut have been derived by use of weaken- 
ing admissibihty with depth |Pii| + 1 and 17^211, the natural sum of which is 
smaller than jPij # |'p2|- The induction hypothesis thus yields | ^''^^^ 
r{[A, A],} and since ct < ct + 1 7 we get | ''^''^'^" r{[A]i} by the lower cut. 
(S - <»): 




T{n''A} 
r{mA} 



Kk 



r{0} 



r{^A} 
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r{mA,O^A} T{<^A,O^A} 

V cut„+„ — 

r{n^A} r{03A} 
r{0} 

\Vl\#\V21 



where the induction hypothesis apphed on the upper cut gives us , ^ 
r{0^ A} and since by Lemma |3. II we have <7+j-h<uj + a = j the lower cut 

yields ^^^r{0}. □ 

From the reduction lemma we obtain the first and the second elimination lemma 
as usual, see for instance Pohlers [221 HD] or Schiitte [IS] . 

Lemma 3.7 (First Elimination Lemma) If | ^^-^ T then T. 

Proof. By induction on a and a case analysis on the last rule applied. Most 
cases are trivial, in case of a cut with rank 7 we apply the induction hypothesis 
to both proofs of the premises of the cut and then apply the reduction lemma 
to obtain | T for some ao < a and thus T. □ 

Lemma 3.8 (Second Elimination Lemma) If | p"^.y F then F. 

Proof. By induction on 7 with a subinduction on a. For 7 = this trivially 
follows from the first elimination lemma. Assume 7 > 0. The non-trivial case is 
where the last rule in the given proof of F is a cut with a rank of /3 or greater. 
With F ~ F{0} the proof is of the following form: 



r{A} r{A} 

— m — 

Let ao = max(\P\\^ We apply the subinduction hypothesis on the sub- 

proofs of the cut and obtain V{A} andp^^ V{A}. Since rk[A) < /3-t- 

uj'^ a quick calculation by case analysis on 7 yields the existence of a with cr < 7 
and of n such that rk{A) < fi -\- w'^ ■ n. Thus, by a cut we obtain I T. 
We apply the induction hypothesis n times to obtain | '''<T(yT-(°^o)-H) -ftrhere (p^ 
means ip^ applied n times. Since (y9^(iy9^(ao) -(- 1) < 'p^{ct) we have | '^"'^"^ p. □ 

The cut-elimination theorem follows by iterated application of the second elim- 
ination lemma. 

Theorem 3.9 (Cut-elimination for the deep system) 
If Dc ^ F then Dc F. 
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Gc + cut 



Gc 



Thm [3A2] 



Thin [3:201 



He 



^ Dc + cut 



ThmEU 



-De 



Figure 3.5: Overview of the various embeddings 



3.4 Cut-Elimination for the Shallow System 



In this section wc give a cut-elimination procedure for the shallow system. To 
do so, we first embed the shallow system with cut into the deep system with cut, 
eliminate the cut there, and embed the cut-free deep system into the cut-free 
shallow system. Figure l375l gives an overview of the embeddings. We have seen 
the horizontal arrow on the right in the last section. Now we are going to see 
the vertical arrows. System He is a Hilbert system which we will see in the last 
section, together with the horizontal arrow on the left. 



3.4.1 Embedding Shallow into Deep 

This is the easy direction. We first define a notion of admissibility which is 
weaker than "depth-preserving" : it allows the proof to grow by a finite amount. 

Definition 3.10 A rule p is finitely admissible for a system S if for each instance 
of p with premises ri,r2 . . . and conclusion A there exists a finite ordinal n 
such that whenever 5 F^ for all i then S \ — ^ A. 

Note that every perfectly admissible (that is, depth- and cut-rank-preserving 
admissible) rule is also finitely admissible: in that case the n in the above 
definition is zero. A finitary rule which is contained in a system is also finitely 
admissible for that system: in that case the n in the above definition is one. 
The cut rule, on the other hand, is generally not finitely admissible for (cut-free) 
infinitary systems. 



Lemma 3.11 The rule d 



r{[^AA]j 

F{^^, [A] J 



is finitely admissible for system Dc. 



Proof. By induction on the depth of the proof of the premise. The only inter- 
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esting case is the one with a €>-rule: 



^ / ^ T{[^A,0'^A,A],} 
r{['$>A,0''A,A],} r{^A,[0''A,A],} 



T{[^A,A],} T{^A,0,0''A,[A],} 

d wk.v* ; 

T{^A,[A],} ^ r{^A,Ofe+iA [A] J 

where the instance of d shown on the right is removed by induction hypothesis. 

□ 

Theorem 3.12 (Shallow into deep) If Gc\^ T then Dc \^ T . 



Proof. By induction on a and a case analysis on the last rule in the proof. Each 
rule of Gc except for the Di-rule is a special case of its respective rule in Dc. 
For the n^-rule we have the following transformation: 





□i ■ 



Oir,<8>A, niA,T, 



wk',0 



d* 



. [r,#A,A], 



□ i ,wk - 



o,r, [^A,A]i 
o,r, ^A, [A], 



o,r,<8>A, ^^A,T, 



where V' is obtained by induction hypothesis. 



□ 



3.4.2 Embedding Deep into Shallow 

This is the harder direction, since we need to simulate deep applicability of 
rules in the shallow system. We use the invertibility of rules in the shallow 
system in order to do so. The Di-rule is the only rule in Gc which is not 
invertible. However, a somewhat weaker property than invertibility holds, which 
is sufficient for our purposes, and which is stated in the upcoming lemma. 

Example 3.13 To motivate the following definition consider the following three 
provable sequents to which the ni-rule cannot be applied (upwards) in an in- 
vertible way: 

□i(a A 5), OiO V Oj& □.i(a A 6), <8>a V <8>6 n^a, <S>a 

Definition 3.14 (hiding formula, <^-satm'ated sequent) A formula is essentially 
Oi if 1) it is of the form OiA for any formula A or 2) it is of the form Ay B,By 
A^ Af\B or B f\A where A is any formula and _B is a formula which is essentially 
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Oi. A formula is hiding Oi in case 2). Wc define essentially <8> and hiding <$> 
formulas likewise. A formula is just hiding if it is either hiding O,; for some i 
or hiding <S>. A sequent F is '^'-saturated if <8>A e F implies C>iA g F, for each 
formula A and each i with 1 < i < /i. 

Definition 3.15 (canonical Di-instance) An instance of the rule 

r,<$>A,A 

°' 0,F,^A,n,A,S 
is canonical if no formulas of the form O^i? or <8>i? arc in E. 

Lemma 3.16 (Quasi-invertibility of the Di-rule) Let F be a €>-saturated sequent 
without hiding formulas and let there be a proof of the sequent DiA, F in Gc- 
Then there is a proof of the same depth in Gc either 1) of the sequent F or 2) 
of the sequent OiA, F where the last rule instance is a canonical instance of the 
□i-rule applying to the shown formula UiA. 



Proof. By induction on the depth of the given proof and a case analysis on 
the last rule. If the endsequent is axiomatic then F is axiomatic and the first 
disjunct of our lemma applies. If the last rule is the H-rule then the proof is of 
the form 




□,A,Fi,bB 



Kfe 



We apply the induction hypothesis to each premise, with F = Fi, n''B. Notice 
that F is <8>-saturatcd and does not contain hiding formulas. There are two 
cases. First, if for all premises the first disjunct of the induction hypothesis is 
true then for each k we have a proof Vj. such that the following shows the first 
disjunct of our lemma: 



Kfe 




Second, if for some premise the second disjunct of the induction hypothesis is 
true then for some k we have a proof of the form 



□i ■ 



A F' 



niA,Ti,n''B 

Notice that the Di-rulc can only introduce a formula of the form n'^B in E, so 
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A,T' 
' n^A, ri,mB 

and we have shown the second disjunct of our lemma. The cases for v and a 
are similar. 

If the last rule is the <8>-rule then the following transformation yields a shorter 
proof: 



n,A,ri,^B,OB 

D^A,^l,^B 



niA,ri,'^B,OB 



n,A,Ti,^B,OiB,...,OnB 



where by assumption of <8>-saturation all the OiB are in Fi. To this proof we 
can now apply the induction hypothesis which yields our lemma. 

If the last rule in the given proof is the nj-rule, then we distinguish two cases. 
First, if HiA is the active formula then the second disjunct of our lemma is 
either immediate or obtained via weakening admissibility if the rule instance is 
not canonical. 

Second, if HiA is not the active formula then the proof is of the form 




aiA,Ti,ajB 



where the formula HiA has been introduced inside E. We can thus change it 
into a proof 




F' 



□j 

Fi,n,B 

which shows the first disjunct of our lemma. □ 

In order to translate a derivation with deep rule applications into a derivation 
where only shallow rules are allowed we need a way of simulating the deep 
applicability. It turns out that, for certain shallow rules, if they are admissible 
for the shallow system, then their "deep version" is also admissible. 
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Definition 3.17 (Mfike a sliallow rule deep) Let C{ } be a formula context. 
Given a rule p we define a rule rule C{p} as follows: an instance of the rule p 
is shown on the left iff an instance of the rule C{p} is shown on the right: 

r,Ai ... r, A, ... r,c{Ai} ...r,c{A,} ... 

p : c{p}- 



r,A T,C{A} 

We define a restricted context as a formula context in which the hole is in the 
scope of at most the connectives from {v,ni,...,n/i}. Given a rule p we define 
the rule rule p as follows: its set of instances is the union of all sets of instances 
of C{p} where C{ } is a restricted context. 

Lemma 3.18 (Deep applicability preserves finite admissibility) Let C{ } be a 

restricted context. 

(i) There is an n such that for all F we have Gc |-^ F, C{p vp} . 

(ii) If a rule p is finitely admissible for Gc then C{p} is also finitely admissible 
for system Gc. 

(iii) If a rule p is finitely admissible for Gc then p is also finitely admissible for 
system Gc. 



Proof. Statement (iii) is immediate from (ii). Both (i) and (ii) arc proved by 
induction on C{ }. The case with C{ } = Ci{ } v C2 is of course analogous 
to the case with C{ } = Ci v } and is omitted. We first prove (i). 
The case that C{ } is empty is handled by an application of the v-rule. If 
C{ } = Ci V C'2{ } or C{ } = DiCij } then we obtain a proof respectively as 
follows: 



V / \ V 

or 

r,Ci,C2{pvp} c\{pvp} 



r,CivC2{pvp} r,n,Ci{pvp} 

where in both cases V exists by induction hypothesis. For statement (ii) the 
case that C{ } is empty is clear, so we assume that it is non-empty. If C{} — 
Ci V C2 { } then the following transformation proves our claim: 




: F,CivC2{Afc} : : r,CuC2{Ak} 

ClVC2{p} — C2{p}- 



F,CivC2{A} r,CuC2{A} 



r,Ci VC2M} 

If C{ } = DiCij } then we have the following situation: 



□ ,Ci{p}- 



F,D,Ci{Afc} 

r,a^Cl{A} 
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In order to apply quasi- invertibility of Lemma [3. 161 we first need to replace 
the shown instance of the rule □iC7i{p} by several instances of it which are 
applied in a context which is <8>-saturated and free of hiding formulas. We apply 
conjunction invertibility, disjunction invertibility and weakening admissibility 
to each Vk to obtain a sequence of proofs Vki ■ • ■ Pkm such that for each k there 
is a proof of the form 




Ti,D,Ci{Ak} ... T,n,n^Ci{Ak} 



T,n,Ci{Ak} 

where each Tj is <$>-saturated and free of hiding formulas. 

Fix some j. For all k apply quasi- invertibility of Hi, Lemma |3.16[ to the proof 
Vkj . Either this yields some proof V of Tj or for each k it yields a proof V'/.j of 
some sequent F' , C'i{Ak}. Then we can build either 




or 



Ci{p}- 



F„n,Ci{A} 



r;-,CiMfc} 
r;-,Ci{A} 
F,,n,Ci{A} 



where in the second case Ci{p} is finitely admissible by induction hypothesis. 
Repeat this argument for each j with I < j < m, which for each j yields a proof 
Vj in Gc- From those we build 




Fi,n,Ci{yl} ... T,n,n^Ci{A} 



r,D,Ci{A} 

which shows our lemma. □ 

Lemma 3.19 (Some glue) The rules in Figure 13.61 are finitely admissible for 
system Gc- 

Proof. The rules gc, ga and gctr are easily seen to be finitely admissible by using 
invertibility of the v-rule. For the go-rule we proceed by induction on the given 
proof of the premise and make a case analysis on the last rule in this proof. 
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T,Av B 


r,(Avs) vc 


gc 


r, B V A 


r,Av(Bvc) 


r,Ay A 

gctr ^ 


r,n,(^vB) 


g* p where k > 1 



Figure 3.6: Some glue 



All cases are trivial except when this is the Di-rule. We distinguish two cases: 
either 1) Di{Ay B) is the active formula or 2) it is not. In the first case we have: 



S],»A,0,A,D,(AvE) 
S,^A,0,A,0,A,n,S 

and in the second case we have the following: 



€>A,A,AvB 
<$'A,A,A,B 



E,€>A,OiA,OiA,niB 




□i 



^^C,T',a^{AvB) 
n,C, r',0,A,n,B 




For the g,$.-rule we proceed by induction on k and a subinduction on the depth 
of the given proof of the premise. For fc = 1 the g<^-rule coincides with the 
^-rule plus a weakening, so we assume that we have a proof of F, O'^^^A. By 
invertibility of the v-rule we obtain a proof 



r,0,0''A,...,OhO''A 

of the same depth. By induction on the depth of V and a case analysis on 
the last rule in V wc now show that we have a proof of the same depth of 
r, <$>A. All cases arc trivial except when the last rule is n^. Then the following 
transformation: 



B,A,^A,0''A 



UiB, 0,A, ^A, E, OiO'^^, . . . , OhO^'A 



^* B,A, ^A,^yl 
OiA, ^A, 
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proves our claim, where the instance of the g^-rule on the right is finitely ad- 
missible by the outer induction hypothesis. □ 

For our translation from deep into shallow we translate nested sequents into 
formulas and thus fix an arbitrary order and association among elements of a 
sequent. The arbitrariness of this translation gets in the way, and we work 
around it as follows: we write 




if the formula B can be derived from the formula A in {gc, ga}. Clearly, in that 
case A and B are equal modulo commutativity and associativity of disjunction. 
The converse is not the case. For example ^(C v £)) can not be derived from 
<^(£' V C) by ac, in general. Note that since gc and ga arc finitely admissible for 
system Gc, so is the rule ac. 

Theorem 3.20 (Deep into shallow) 

If Dc\^T then we have Gc pli^±il . 



Proof. By induction on a. If the endsequent of the given proof is of the form 
T{p,p}, then we have 



r{p,p} 

ac 

where V is of finite depth by Lemma 13.181 and ac is finitely admissible by 
Lemma [3. 191 and Lemma [3.181 If the last rule is the v-rule then an application 
of ac proves our claim. The case of the ni-rulc is trivial since the corresponding 
formula for the premise is the corresponding formula of the conclusion. For the 
S-rule we apply the following transformation, where the V'j. are obtained by 
induction hypothesis: 





T{mA} 



l<k<uj 




r{DM}^ 



l<k<uj 



Let the depth of the proof on the left be /3 with (3 < a and the depth of a proof 
Vk be /3fc. Note that the depth of the ac-derivations both below and above the 
infinitary rule is bounded by a finite ordinal m because the context T{ } is finite. 
Then, by finite admissibility of the rule £^{1*1} (Lemma I3.18P there is a finite 
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ordinal n such that the proof on the right has the depth 

< supfc(w ■ il3k + 1)) + oj = uj- sup^,(/3fc + l)+oj 
= w/3 + w = w-(/? + l)<w-(a + l) 

The case for the A-rule is similar. For the O^-rulc we apply the following trans- 
formation, where V' is obtained by induction hypothesis and the bound on the 
depth is easy to check: 



Oi ■ 



Tjog, [A A] J 
r{0,A, [A] J 



EpIgcvn.Ap} 



T{0,A, [A,A],l 

IC 

r,{0,AvD,(AvA,)} 
r,{0,Av(0,^vD,A,)} 
r,{(0,AvO,^) vD,AJ 
r,{0,Avn,AJ 

ac 

r{o,A, [A],} 



Note that here a rule like C{p v A} means the rule p applied in the context 
C{{ } V A}, and is finitely admissible for Gc if is p is finitely admissible for Gc, 
by Lemma [3. 181 

The case for the <$>-rule is similar. □ 



We can now state the cut-elimination theorem for the shallow system. 

Theorem 3.21 (Cut-elimination for the shallow system) 

If Gc ^ r then Gc r 



3.5 An Upper Bound on the Depth of Proofs 

The Hilbert system He is obtained from some Hilbert system for classical propo- 
sitional logic by adding the axioms and rules shown in Fiaure lSTfl It is essentially 
the same as system from the book [18] , where also soundness and complete- 
ness are shown. We will now embed He into Dc + cut, keeping track of the 
proof depth and thus, via cut-elimination for Dc, establish an upper bound for 
proofs in Dc. Via the embedding of the deep system into the shallow system, 
this bound also holds for the shallow system. 

Theorem 3.22 (He into Dc + cut) If He h yl then Dc ^■ 

Proof. The proof is by induction on the depth of the derivation in He- If A is 
a propositional axiom of He then there is a finite derivation of A in the propo- 
sitional part of system Dc such that all premises are instances of the general 
identity axiom. Thus we obtain Dc | — q — A for some to < w by admissibility of 
the general identity axiom (Lemma 13. 4p . 
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(K) n^A /\ n.,{A D B) D ^^B (CCL) ieAd {nA a. nsA) 



Figure 3.7: System He 



If A is an instance of (K), then we obtain Dc | "q™ A for some m < uj from the 
following derivation and admissibility of the general identity axiom to take care 
of the premises. 

^ 0,A,0,{AaB),[B,A, A], 

O^A, 0,{A A B), [B, A], 0,A, 0,{A a B), [B, B], 
0,A,0,{AaB),[B,AaB], 

0,A,0,iAAB),[B], 
°'o,l, 0,{AAB),a^B 
DiA A ni{A D B)d HiB 



If A is an instance of (CCL), then we obtain Dc |— (j— A for some m < uj from 
the following derivation and again admissibility of the general identity axiom to 
take care of the premises. An argument similar to the one used to derive the 
general identity axiom guarantees that all premises of the 13 rule are derivable 
with depth smaller than rk{l*}A). 

[0''A,a''A], 

Oi.wk- 



v.wk = 



■^A, [a'' A], 



l<k<uj 



^A, [i*}A]i 

□i — = 

OA,nA : '$>A,nimA 

•,wk - 



l<i</i 



<$>A,nA '$>A,nmA 

A 

'$'A, nA A nmA 

V 

d {nA A nsA) 

If the last rule in the derivation is an instance of (MP), then by the induction 
hypothesis there are mi, m2, tt-i, ri2 < uj such that Dc | "^'n^^ A and Dc | '^^^^ 
AdB. Thus we get Dc | " A, B by weakening admissibility and Dc | "2' A, B 

by invertibility. An application of cut yields Dc | " ™ B for m = max{mi, 7712) + ! 
and n = max{ni,n2, rk{A) + 1). 

If the last rule in the derivation is an instance of (NEC), then the claim fol- 
lows from the induction hypothesis, the fact that nec is cut-rank- and depth- 
preserving admissible, and an application of D^. 

If the last rule in the derivation is an instance of (IND), then by the induction 
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hypothesis there are toi, ni < lo such that Dc | B 3 (nA a nB). Then by 
invertibihty of the a- and v-rules we obtain 

and 2)DcF^S,nA 

Let 712 be such that rk{nB) < lo ■ n2. We set n = max(ni, 712). By induction on 
k we show that for all A: > 1 there is an TO2 < uj such that Dr I " S, 
The case = 1 is given by 2) and the induction step is as follows: 

B,a''A 



[3,0" A], 

Oi.wk = ; 

v,wk 

: C>B,D^a''A 
B,uB " OB,u^+^A 

cut 



l<i<h 



B.d'+'^A 

where the premise on the left is 1) and the premise on the right follows by 
induction hypothesis. The claim follows by applications of S and v. □ 

The embedding of the Hilbert system into the nested sequent system together 
with the cut-elimination theorem for the deep system gives us the following 
upper bounds on the depth of proofs in the cut-free systems. 

Theorem 3.23 (Upper bounds) If ^ is a valid formula then 
(i) Dc \^ A, and 
(n) Gc h- ^ A. 

Proof. If A is valid then by completeness of He we have He h A and by the 
embedding of the Hilbert system into the nested sequent system there are nat- 
ural numbers m, n such that Dr I — - — A. By the cut elimination theorem for 

the nested sequent system we obtain Dc | '^^ t^'™) ^ know </3^i7i < ^pp^l^ 
if /3i < /32 and 71 < </3^2 72- Thus Dc | ^ A. For (ii) by the embedding of the 
deep system into the shallow system it suffices to check that for a < ip20 we 
have oj ■ {a + 1) < 1P2O. □ 



3.6 Discussion 

We have introduced a nested sequent system for common knowledge which, 
in contrast to the ordinary sequent system by Alberucci and Jager, admits a 
syntactic cut-elimination procedure. We have shown this cut-elimination proce- 
dure, and, via embedding the two systems into each other, have also provided a 
cut-elimination procedure for the shallow system. We embedded a Hilbert style 
system and obtained 1P2O as upper bound on the depth of cut-free proofs for 
both sequent systems. 

Notice in particular how we used the nested sequent system as a tool in order 
to prove a result about an existing, ordinary sequent system. Designing some 
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kind of infinitary proof system with a syntactic cut-elimination for the logic of 
common knowledge was the less interesting part: we could have used both the 
display calculus and labelled sequents to do so. However, it is hard to imagine 
how a cut-free display calculus or cut-free labelled sequent calculus could have 
been translated back into our cut-free ordinary sequent calculus. The fact that 
nested sequents stay inside the modal language allowed us to do so. 

Other modal logics. Wc have looked at common knowledge based on the least 
normal modal logic. In a sense, common belief would be a better name. Given 
the previous chapter, it seems that any other modal logic of the cube could be 
used instead and thus our approach is independent of the particular underlying 
axiomatisation of knowledge. The modal logic S5 is often proposed as an ade- 
quate logic for knowledge. As we have seen in the previous chapter, contrary to 
shallow sequents, nested sequents can easily handle S5. So it is easy to design 
a system for S5-based common knowledge. We just need to add a single rule to 
system Dc: 

r{OA}{A} 
T{OA}m 

However, hypersequents are already sufficient to capture S5 and a system for 
S5-based common knowledge based on the hypcrscqucnt system LS5 by Mints 
[34j seems to admit a cut-elimination procedure similar to the one given here 
for system Dc- So for S5-based common knowledge there is no need for nested 
sequents. 

Future work. Of course there are also more speculative questions. What is the 
mathematical meaning of the upper bound on the depth of cut-free proofs? Is 
there a kind of boundedness lemma in modal logic similar to the one used in 
the analysis of set theories and second order arithmetic? What would be the 
equivalent of a well-ordering proof in modal logic? Is LP2O the best possible 
upper bound on the depth of proofs? Can our analysis be extended to more 
powerful modal fixpoint logics? Work under preparation suggests that a cut-free 
infinitary nested sequent system for the /i-calculus can be bounded by ip^O. 

A more interesting, and harder problem is the design of cut-free finitary sequent 
systems for modal fixpoint logics. While such systems exist, for example for 
temporal logics [501 [H] i their rules are context-dependent in a way which makes 
it hard to study them proof-theoretically, in particular it seems hard to design 
a syntactic cut-elimination procedure. 



CHAPTER 3. SYSTEMS FOR COMMON KNOWLEDCE 



Bibliography 



[1] Pietro Abate, Rajeev Gore, and Florian Widmann. Cut-free single-pass 
tableaux for the logic of common knowledge. In Workshop on Agents and 
Deduction at TABLEA UX 2007, 2007. 

[2] Luca Alberucci and Gerhard Jager. About cut elimination for logics of 
common knowledge. Annals of Pure and Applied Logic, 133:73-99, 2005. 

[3] Evangelia Antonakos. Justified and common knowledge: Limited conser- 



vativity. In Sergei Artemov and Anil Nerode, editors, LFCS, volume 4514 
of Lecture Notes in Computer Science, pages 1-11. Springer, 2007. 

[4] Sergei Artemov. Logic of proofs. Annals of Pure and Applied Logic, 67:29- 
59, 1994. 

[5] Sergei Artemov. Justified common knowledge. Theoretical Computer Sci- 
ence, 357(l):4-22, 2006. 

[6] Arnon Avron. The method of hypersequents in the proof theory of propo- 
sitional non-classical logics. In Wilfrid Hodges, Martin Hyland, Charles 
Steinhorn, and John Truss, editors. Logic: from foundations to applications. 
Proc. Logic Colloquium, Keele, UK, 1993, pages 1-32. Oxford University 
Press, New York, 1996. 

[7] Nuel D. Belnap, Jr. Display logic. Journal of Philosophical Logic, 11:375- 
417, 1982. 

[8] Kai Briinnler and Thomas Studer. Syntactic cut-elimination for common 
knowledge. Electronic Notes in Theoretical Computer Science, 231:227 - 
240, 2009. Proceedings of the 5th Workshop on Methods for Modalities 
(M4M5 2007). 

[9] Kai Briinnler. Deep Inference and Symmetry in Classical Proofs. PhD 
thesis, Technischc Universitat Dresden, September 2003. 

[10] Kai Briinnler. Deep sequent systems for modal logic. In Guido Governa- 
tori, Ian Hodkinson, and Yde Venema, editors. Advances in Modal Logic, 
volume 6, pages 107-119. College Publications, 2006. 

[11] Kai Briinnler. Deep sequent systems for modal logic. To 
appear in Archive for Mathematical Logic. Available from 
http : //www ■ jam . unibe . ch/~kai/Papers/ dsm . pdf [ 2008. 



69 



70 



BIBLIOGRAPHY 



[12] Kai Briinnler and Martin Lange. Cut-free sequent systems for temporal 
logic. J. Log. Algebr. Program., 76(2):216-225, 2008. 

[13] Kai Briinnler and Thomas Studer. Syntactic cut-elimination for common 
knowledge. Annals of Pure and Applied Logic, 160(1):82 - 95, 2009. 

[14] Kai Briinnler and Alwen Fernanto Tin. A local system for classical logic. 
In R. Nieuwenhuis and A. Voronkov, editors, LPAR 2001, volume 2250 
of Lecture Notes in Artificial Intelligence, pages 347-361. Springer- Verlag, 
2001. 

[15] Robert A. Bull. Cut elimination for propositional dynamic logic without *. 
Mathematische Logik und Grundlagen der Mathematik, 38:85-100, 1992. 

[16] Marcos A. Castilho, Luis Fariiias del Cerro, Olivier Gasquet, and Andreas 
Hcrzig. Modal tableaux with propagation rules and structural rules. Fun- 
dam. Inf., 32(3-4):281-297, 1997. 

[17] Agata Ciabattoni, Nikolaos Galatos, and Kazushige Terui. From axioms 
to analytic rules in nonclassical logics. In Proceedings of LICS'08, pages 
229-240, 2008. 

[18] Ronald Fagin, Joseph Y. Halpern, Yoram Moses, and Moshe Y. Vardi. 
Reasoning about Knowledge. The MIT Press, Boston, 1995. 

[19] Melvin Fitting. Proof methods for modal and intuitionistic logics. Synthese 
library. D. Reidel, Dordrecht, Holland, 1983. 

[20] Joxe Gaintzarain, Montserrat Hermo, Faqui Lucio, Marisa Navarro, and 
Fernando Orejas. A cut-free and invariant-free sequent calculus for PLTL. 
In Jacques Duparc and Thomas A. Henzinger, editors, CSL, volume 4646 
of Lecture Notes in Computer Science, pages 481-495. Springer, 2007. 

[21] Jim Carson. Modal logic. In Edward N. Zalta, editor, The Stan- 
ford Encyclopedia of Philosophy. Stanford University, Spring 2008. 
|http : //plato ■ Stanford . edu/ archives/ spr2008/entries/logic-modal7 

[22] Rajeev Gore. Tableau methods for modal and temporal logics. In 
M. D'Agostino, D. Gabbay, R. Haehnle, and Posegga J., editors. Handbook 
of Tableau Methods, pages 297-396. Kluwer Academic Publishers, 1999. 

[23] Rajeev Gore, Linda Postniece, and Alwen Tin. Cut-elimination and proof- 
search for bi-intuitionistic logic using nested sequents. In Advances in Modal 
Logic, pages 43-66. College Publications, 2008. 

[24] Rajeev Gore, Linda Postniece, and Alwen Tin. Taming displayed tense 
logics using nested sequents with deep inference. Accepted at Tableaux 
2009, 2009. 

[25] Rajeev Gore and Alwen Tin. Classical modal display logic in the calculus 
of structures and minimal cut-free deep inference calculi for S5. Journal of 
Logic and Computation, 17(4):767-794, 2007. 

[26] Alessio Guglielmi. A system of interaction and structure. A CM Transac- 
tions on Computational Logic, 8(l):l-64, 2007. 



BIBLIOGRAPHY 



71 



Joseph Y. Halpern and Yoram Moses. Knowledge and common knowledge 
in a distributed environment. Journal of the ACM, 37(3):549-587, 1990. 

Robert Hein and Charles Stewart. Purity through unravelling. In Paola 
Bruscoli, Frangois Lamarche, and Charles Stewart, editors, Structures and 
Deduction, pages 126-143. Technische Universitat Dresden, 2005. 

Gerhard Jager, Mathis Kretz, and Thomas Studer. Cut-free common 
knowledge. J. Applied Logic, 5(4):681-689, 2007. 

Ryo Kashima. Cut-free sequent calculi for some tense logics. Studia Logica, 
53:119-135, 1994. 

Mathis Kretz and Thomas Studer. Deduction chains for common knowl- 
edge. Journal of Applied Logic, 4:331-357, 2006. 

Simone Martini and Andrea Masini. A computational interpretation of 
modal proofs. In H. Wansing, editor. Proof theory of modal logic, volume 2 
of Applied logic series, pages 213-241. Kluwer, 1996. 

John-Jules Meyer and Wiebe van der Hoek. Epistemic Logic for AI and 
Computer Science. Cambridge University Press, 1995. 

Grigorii E. Mints. Lewis' systems and system T. In Selected papers in 
proof-theory (1965-1973). Bibliopolis, 1992. 

Michael Moortgat. Categorial type logics. In J. van Benthem and A. ter 
Meulen, editors. Handbook of Logic and Language, pages 93-177. Elsevier, 
1997. 

Sara Negri. Proof analysis in modal logic. Journal of Philosophical Logic, 
34(5 - 6):507- 544, 2005. 

Regimantas Pliuskevicius. Investigation of finitary calculus for a discrete 
linear time logic by means of infinitary calculus. In Baltic Computer Sci- 
ence, Selected Papers, pages 504-528, London, UK, 1991. Springer- Verlag. 

Francesca Poggiolesi. The tree-hypersequent method for modal proposi- 
tional logic. In Jacek Malinowski David Makinson and Heinrich Wansing, 
editors. Towards Mathematical Philosophy, Trends in Logic, pages 9-30. 
Springer, 2009. 

Wolfram Pohlers. Proof Theory - An Introduction. Springer, 1989. 

Wolfram Pohlers. Subsystems of set theory and second order number the- 
ory. In Sam Buss, editor. Handbook of Proof Theory, pages 209-335. Else- 
vier, 1998. 

David J. Pym. The Semantics and Proof Theory of the Logic of Bunched 
Implications, volume 26 of Applied Logic Series. Kluwer Academic Pub- 
hshers, 2002. 

Mehrnoosh Sadrzadeh and Roy DyckhofF. Positive logic with adjoint modal- 
ities: Proof theory, semantics and reasoning about information. ENTCS, 
MFPS, University of Oxford, April 2009., 2009. 



72 BIBLIOGRAPHY 

[43] Masahiko Sato. A study of Kripke-type models for some modal logics by 
Gentzen's sequential method. Publications of the Research Institute for 
Mathematical Sciences, Kyoto University, 13:381-468, 1977. 

[44] Kurt Schiittc. Schlusswcisen-Kalkiile der Pradikatenlogik. Mathematische 
Annalen, 122:47-65, 1950. 

[45] Kurt Schiitte. Proof Theory. Springer- Verlag, 1977. 

[46] Charles Stewart and Phiniki Stouppa. A systematic proof theory for several 
modal logics. In Renate Schmidt, Ian Pratt-Hartmann, Mark Reynolds, and 
Heinrich Wansing, editors. Advances in Modal Logic, volume 5 of King's 
College Publications, pages 309-333, 2005. 

[47] Phiniki Stouppa. A deep inference system for the modal logic S5. Studia 
Logica, 85(2):199-214, 2007. 

Lutz Strafiburger. From deep inference to proof nets via cut elim- 
ination. Journal of Logic and Computation, 2009. In press. 
[http : //www ■ lix .polytechnique . f r/~lutz/papers/deepnet . pdf 



[49] Yoshihito Tanaka. Some proof systems for predicate common knowledge 
logic. Reports on mathematical logic, 37:79-100, 2003. 

[50] Anne Sjerp Troelstra and Helmut Schwichtenberg. Basic Proof Theory. 
Cambridge University Press, 1996. 

[51] Luca Vigano. Labelled Non-Classical Logics. Kluwer Academic Publishers, 
Dordrecht, 2000. 

[52] Heinrich Wansing. Displaying Modal Logic, volume 3 of Trends in Logic 
Series. Kluwer Academic Publishers, Dordrecht, 1998. 

[53] Heinrich Wansing. Sequent systems for modal logics. In D. Gabbay and 
F. Guenther, editors. Handbook of Philosophical Logic, 2nd edition, vol- 
ume 8, pages 61-145. Kluwer, Dordrecht, 2002. 



